Interdisciplinary Research Group in Socio-technical Cybersecurity
Analysing the Efficacy of Security Policies in Cyber-Physical Socio-Technical Systems
A crucial question for an ICT organization wishing to improve its security is whether a security policy together with physical access controls protects from socio-technical threats. We study this question formally. We model the information flow defined by what the organization’s employees do (copy, move, and destroy information) and propose an algorithm that enforces a policy on the model, before checking against an adversary if a security requirement holds.
Gabriele Lenzini, Sjouke Mauw, Samir Ouchani
Lecture Notes in Computer Science
Lenzini, G., Mauw, S., & Ouchani, S. (2016, September). Analysing the efficacy of security policies in cyber-physical socio-technical systems. In International Workshop on Security and Trust Management (pp. 170-178). Springer, Cham.
Get in touch with us
SnT – Interdisciplinary Centre for Security, Reliability and Trust
29, Avenue J.F Kennedy L-1855 Luxembourg