ObjectSecurity Home Products Services Customers+Partners Industries Contact
OpenPMF 2.0 Model Driven Security Management
News+Events  News, events, press releases
Email newsletter
News

News archive

Upcoming Events & Conferences
  • Gartner Emerging Trends Symposium 2008
    ObjectSecurity will attend Gartner's Emerging Trends Symposium 2008, Barcelona 13-14 Mayl 2008. Contact us to arrange a meeting.
  • Airport IT 2008 (at ILA Berlin)
    ObjectSecurity will present "Airport operations optimisation through agile, secure IT integration, SESAR, SWIM-SUIT" together with Eamonn Cheverton, Enterprise Architect, BAA, London, UK at Airport IT 2008, Berlin, Germany, 28/29 May 2008. The presentation will cover the following topics: Flexible, future-proof IT integration is at the heart of airport CDM --- (A-CDM/TAM): Service-Oriented Architecture (SOA) and Business Process Model --- (BPM) driven IT management --- Manageable, good information security is a critical enabler for such integrated systems --- This presentation will discuss state-of-the-art approaches for secure A-CDM/TAM integration (including model-driven security) --- The presentation will also provide an update on the SESAR undertaking, and on the SWIM-SUIT project
  • ITEC 2008
    ObjectSecurity will present “Rapid model-driven simulation/prototyping/testing of secure information sharing in distributed systems” at ITEC 2008, Stockholm, Sweden, 10-12 June 2008. Contact us to arrange a meeting.
    . Abstract: Collaborative decision making and situational awareness depend on secure information sharing. However, often the immediate benefits vs. risks are unclear to the different stakeholders, and they cannot imagine the resulting new/improved processes. Furthermore, lack of security is often a show-stopper. To solve this, we have developed an inexpensive, model-driven virtual reality rapid prototyping, simulation, and testing environment. Secure information sharing and security implications can be rapidly prototyped and tested. We show a visual airport crisis scenario running across a distributed IT environment and how it can be used to prototype, demonstrate, and test information sharing and security. 
  • Transec World Expo 2008
    ObjectSecurity will Transec World Expo 2008, 25-26 June 2008, Amsterdam, Netherlands. Contact us to arrange a meeting.
  • Future Security Symposium 2008
    ObjectSecurity will present at the Fraunhofer Future Security Symposium 2008, 10-11 September 2008, Karlsruhe, Germany. Abstract: Secure Model Driven Information Exchange -
    Information, information exchange and information fusion, is the key enabler for the whole "life cycle" of security, from vulnerability analysis over plans and training to responding to incidents. But in reality, sharing information is not easy. First of all, information flow has to be enabled. This requires interoperability at all layers, from low level communications over middleware to the semantics of the information exchanged. It is a huge challenge, especially in environments with legacy systems and multiple organisations. Secondly, the information flow has to be controlled. The fact that two or more organisations are willing to plan, train or work together does not mean that they are willing to share all their information with others. The obvious solution at least for the interoperability problem, standardisation, does not work, for political, historical and sometimes even technical reasons. In our presentation, we propose to apply the concepts of model driven engineering to information exchange. We use abstract and platform independend models, so called Domain Specific Languages, to describe information, stakeholders and their systems, and information flows. From these models, we automatically generate platform specific exchange formats, adapters for legacy integration, bridges between different middleware platforms and security policies. This enables a quick integration of incompatible legacy systems and allows a secure information exchange between different systems and organisations. As a proof of concept, our approach is successfully used in several research projects, including a simulation of emergencies at an airport, Air Traffic Management and intrusion detection in tactical military networks.

Publication archive

 



      

Copyright (c) 2000-2008 ObjectSecurity - all rights reserved - copyright & terms of use - site map overview - webmaster