Caulfield, T;
Pym, D;
(2015)
Modelling and simulating systems security policy.
Presented at: Eighth EAI International Conference on Simulation Tools and Techniques, Athens, Greece.
![]() |
Text
CaulfieldPym.pdf Download (583kB) |
Abstract
Security managers face the challenge of designing security policies that deliver the objectives required by their organizations. We explain how a rigorous modelling framework and methodology - grounded in semantically justified mathematical systems modelling, the economics of decision-making, and simulation - can be used to explore the operational consequences of their design choices and help security managers to make better decisions. The methodology is based on constructing executable system models that illustrate the effects of different policy choices. Models are compositional, allowing complex systems to be expressed as combinations of smaller, complete models. They capture the logical and physical structure of systems, the choices and behaviour of agents within the system, and the security managers' preferences about outcomes. Utility theory is used to describe the extent to which security managers' policies deliver their security objectives. Models are parametrized based on data obtained from observations of real-world systems that correspond closely to the examples described.
Type: | Conference item (UNSPECIFIED) |
---|---|
Title: | Modelling and simulating systems security policy |
Event: | Eighth EAI International Conference on Simulation Tools and Techniques |
Location: | Athens, Greece |
Dates: | 2015 |
ISBN-13: | 9781631900792 |
Open access status: | An open access version is available from UCL Discovery |
DOI: | 10.4108/eai.24-8-2015.2260765 |
Publisher version: | http://dx.doi.org/10.4108/eai.24-8-2015.2260765 |
Language: | English |
Additional information: | Copyright © 2015–2015 ICST. This is the author's version of the work. It is posted here for your personal use. Not for redistribution. The definitive Version of Record was published in Eighth EAI International Conference on Simulation Tools and Techniques, http://dx.doi.org/10.1145/10.4108/eai.24-8-2015.2260765 |
Keywords: | Composition, Decision, Location, Logic, Modelling, Policy, Process, Resource, Security, Semantics, Simulation |
UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
URI: | https://discovery.ucl.ac.uk/id/eprint/1468683 |




Archive Staff Only
![]() |
View Item |