Ulrich Lang's Security Policy Automation & Model-Driven Security Blog: Cloud application security discussion at Cloud Security Alliance (CSA)

Tuesday, 22 June 2010

Cloud application security discussion at Cloud Security Alliance (CSA)

Cloud Security Alliance (CSA) LinkedIn Group discussion about Cloud application security
There is a pretty lively discussion going on about Cloud application security at the Cloud Security Alliance (CSA) LinkedIn Group. As expected, the discussion seems to home in on the need to configure and enforce fine-grained technical authorization and monitoring policies - the driver behind model-driven security policy automation.

Follow the discussion here:
http://www.linkedin.com/groupAnswers?viewQuestionAndAnswers=&gid=1864210&discussionID=20649547

P.S. If you would like more information about Cloud application security, please have a look at our eBooks or contact us.

No comments:

Post a Comment

Dr. Ulrich Lang, CEO & Co-Founder ObjectSecurity

Dr. Ulrich Lang (CEO, co-founder ObjectSecurity) received his Ph.D. from the University of Cambridge Computer Laboratory (Security Group) on conceptual aspects of middleware security in 2003 (sponsored by the UK Defence and Evaluation Research Agency (DERA), after having completed a Master's Degree (M. Sc.) in Information Security with distinction from Royal Holloway College (University of London) in 1997. On the management side, he has recently completed a Business Marketing Strategy course at the Kellogg School of Management (Northwestern University). Prior to his M. Sc. he studied computer science & management at the University of Munich and at Royal Holloway College (University of London). He has served in the German federal civil defence (technical and logistical relief) for several years. He has also previously worked as a proposal evaluator for public-funded R&D projects and as an independent information security consultant on various CORBA based banking projects. Ulrich Lang is the lead author on a book written with Rudolf Schreiner on “Developing Secure Distributed Systems with CORBA”, and published various articles in journals and many publications at international conferences and workshops. In addition to his strategic managerial activities, Ulrich Lang's current interests are organisational information security, security policy development, and security visualisation for complexity reduction. He is currently involved in several security and software projects, including ObjectSecurity's collaboration with the U.S. Naval Research Laboratory.

Rudolf Schreiner, CTO & Co-Founder, ObjectSecurity

Rudolf Schreiner (CTO, co-founder) received his Master's (Dipl-Phys.) in physics from University of Munich in 1993. After graduation he worked as an independent software engineer and consultant on various computer security projects in banking, manufacturing and telecommunications. Rudolf Schreiner is the principal architect behind MICOSec Secure CORBA and the ObjectWall IIOP firewall. He has served in the German federal civil defence (technical and logistical relief) for several years. His main interest is the modelling and development of mission critical and secure applications. Rudolf Schreiner is currently the chief architect and coordinator for our OpenPMF policy management framework. Amongst other topics, he is also involved in the development of secure distributed systems in the air traffic management domain.

Definition: Model driven security (MDS)

MDS is the tool supported process of modelling security requirements at a high level of abstraction, and using other information sources available about the system (produced by other stakeholders). These inputs, which are expressed in Domain Specific Languages (DSL), are then transformed into enforceable security rules with as little human intervention as possible. MDS explicitly also includes the run-time security management (e.g. entitlements/authorisations), i.e. run-time enforcement of the policy on the protected IT systems, dynamic policy updates and the monitoring of policy violations.

Ulrich Lang's Security Policy Automation & Model-Driven Security Blog

Model Driven Security Policy Automation

Tuesday, 22 June 2010

Cloud application security discussion at Cloud Security Alliance (CSA)

No comments:

Blog Archive

PUBLICATIONS ON MODEL-DRIVEN SECURITY