Ulrich Lang's Security Policy Automation & Model-Driven Security Blog: December 2011

Friday, 9 December 2011

Gartner identifies model-driven security as part of "Top 10 Strategic Technologies for 2012"

Industry analyst firm Gartner identifies model-driven security as part of "Top 10 Strategic Technologies for 2012", in the context of "Contextual and Social User Experience". They write "A contextually aware system anticipates the user’s needs and proactively serves up the most appropriate and customized content, product or service. Context can be used to link mobile, social, location, payment and commerce. It can help build skills in augmented reality, model-driven security and ensemble applications." (source: Gartner Identifies the Top 10 Strategic Technologies for 2012). It is great to see that industry analysts continue to acknowledge the significant potential of model-driven security to automate the technical implementation of contextual, rich, and expressive security policies. Read more about model-driven security on this blog, or contact us for more information.

Dr. Ulrich Lang, CEO & Co-Founder ObjectSecurity

Dr. Ulrich Lang (CEO, co-founder ObjectSecurity) received his Ph.D. from the University of Cambridge Computer Laboratory (Security Group) on conceptual aspects of middleware security in 2003 (sponsored by the UK Defence and Evaluation Research Agency (DERA), after having completed a Master's Degree (M. Sc.) in Information Security with distinction from Royal Holloway College (University of London) in 1997. On the management side, he has recently completed a Business Marketing Strategy course at the Kellogg School of Management (Northwestern University). Prior to his M. Sc. he studied computer science & management at the University of Munich and at Royal Holloway College (University of London). He has served in the German federal civil defence (technical and logistical relief) for several years. He has also previously worked as a proposal evaluator for public-funded R&D projects and as an independent information security consultant on various CORBA based banking projects. Ulrich Lang is the lead author on a book written with Rudolf Schreiner on “Developing Secure Distributed Systems with CORBA”, and published various articles in journals and many publications at international conferences and workshops. In addition to his strategic managerial activities, Ulrich Lang's current interests are organisational information security, security policy development, and security visualisation for complexity reduction. He is currently involved in several security and software projects, including ObjectSecurity's collaboration with the U.S. Naval Research Laboratory.

Rudolf Schreiner, CTO & Co-Founder, ObjectSecurity

Rudolf Schreiner (CTO, co-founder) received his Master's (Dipl-Phys.) in physics from University of Munich in 1993. After graduation he worked as an independent software engineer and consultant on various computer security projects in banking, manufacturing and telecommunications. Rudolf Schreiner is the principal architect behind MICOSec Secure CORBA and the ObjectWall IIOP firewall. He has served in the German federal civil defence (technical and logistical relief) for several years. His main interest is the modelling and development of mission critical and secure applications. Rudolf Schreiner is currently the chief architect and coordinator for our OpenPMF policy management framework. Amongst other topics, he is also involved in the development of secure distributed systems in the air traffic management domain.

Definition: Model driven security (MDS)

MDS is the tool supported process of modelling security requirements at a high level of abstraction, and using other information sources available about the system (produced by other stakeholders). These inputs, which are expressed in Domain Specific Languages (DSL), are then transformed into enforceable security rules with as little human intervention as possible. MDS explicitly also includes the run-time security management (e.g. entitlements/authorisations), i.e. run-time enforcement of the policy on the protected IT systems, dynamic policy updates and the monitoring of policy violations.

Ulrich Lang's Security Policy Automation & Model-Driven Security Blog

Model Driven Security Policy Automation

Thursday, 15 December 2011

Model-driven security is now on Wikipedia

Friday, 9 December 2011

Gartner identifies model-driven security as part of "Top 10 Strategic Technologies for 2012"

Blog Archive

PUBLICATIONS ON MODEL-DRIVEN SECURITY