Skip to main content
DeutschDE
European Commission logo print header

Policy-based security tools and framework

Ziel

POSITIF will develop a framework and tools for policy-based protection of networked systems and applications. A multi-level policy language will be used to describe the desired security policy (high-level requirements and/or detailed controls) while a system language will be used to describe the target system (interconnection topology, functional and security capabilities). A checker will evaluate if the desired policy can be implemented on the target system and will measure the achieved security level.

Configurations for the security elements will then be automatically generated and deployed through the network. A monitor will use the security policy for proactive intrusion detection (an intrusion is anything that doesn't comply with the policy) in addition to standard reactive intrusion detection (check against attack patterns). The framework will be usable by any producer of a specific security block or tool because open standard-based languages, interfaces and protocols will be used for policy and system description, configuration instructions and deployment, threat monitoring (e.g. XML, SNMP, IPSP, SAML, IDXP, IDMEF). The framework will be complemented by a suite of security tools (both industrial-grade and open-source) that match the specification and will thus be directly usable within the framework.

They will include high-speed (up to 10 Gbps) firewall, VPN and IDS that target the current challenges (wired/wireless protocols, IPv4/IPv6 networks, encrypted protocols, protocols on non-standard ports, XML-based application protocols, multimedia content, ...) and a lightweight security module (for workstations and mobile devices) to protect them against network attacks, make them part of the security system and permit secure download of new configurations. To get user requirements and for development test, the project includes three test beds: a metropolitan research environment, a geographic government network and a wired/wireless phone and ISP operator.

Wissenschaftliches Gebiet

Programm/Programme

Thema/Themen

Aufforderung zur Vorschlagseinreichung

Data not available

Finanzierungsplan

STREP - Specific Targeted Research Project

Koordinator

POLITECNICO DI TORINO
EU-Beitrag
Keine Daten
Adresse
CORSO DUCA DEGLI ABRUZZI 24
10129 TORINO
Italien

Auf der Karte ansehen
Gesamtkosten
Keine Daten

Beteiligte (8)

Diese Seite teilen

Herunterladen

Letzte Aktualisierung: 9 April 2008

Mein Booklet

Permalink: https://cordis.europa.eu/project/id/002314/de

European Union, 2024