Search

This paper addresses to the technique of security evaluation based on security attributes analysis in discretionary access control. A multi-level framework is built to calculate a set of effective user's permissions automatically. Information about the effective access rights is necessary during security verification procedure. In this paper we also propose a schema of Security Evaluation System. [ABSTRACT FROM AUTHOR]

This paper addresses to the technique of the vulnerabilities detection. The proposed methodology is applicable to verify property of the operating system configurations safety. Using our technique it becomes possible to discover security drawbacks in any secure system based on access control model of 'state machine' style. We discuss the Vulnerability Criteria Processing Unit, the automated detection tool, working in MS Windows and calculating the set of vulnerable settings. Through our case study of model checking in Sample Vulnerability Checking (SVC), we show how the proposed technique is applied to verify system security. [ABSTRACT FROM AUTHOR]