Title :
The PEI framework for application-centric security
Author_Institution :
Inst. for Cyber Security, Univ. of Texas at San Antonio, San Antonio, TX, USA
Abstract :
This paper motivates the fundamental importance of application context for security. It then gives an overview of the PEI framework for application-centric security and outlines some of the lessons learned in applying this framework. PEI stands for Policy, Enforcement and Implementation, signifying three distinct layers at which security policy and design decisions need to be made. The framework was introduced by this author in 2006. It is closely related to the earlier OM-AM framework also introduced by this author in 2000.
Keywords :
security of data; PEI; application centric security; security policy; Access control; Books; Computational modeling; Computer security; Computers; Context;
Conference_Titel :
Security and Communication Networks (IWSCN), 2009 Proceedings of the 1st International Workshop on
Conference_Location :
Trondheim
Print_ISBN :
978-1-61284-168-7
Electronic_ISBN :
978-82-997105-1-0
