A Formal Model of Security Controls' Capabilities and Its Applications to Policy Refinement and Incident Management

Cataldo Basile, Gabriele Gatti, Francesco Settanni

Enforcing security requirements in networked information systems relies on security controls to mitigate the risks from increasingly dangerous threats. Configuring security control…