{"id":"https://openalex.org/W2406283045","doi":null,"title":"A Quantified Model of Security Policies, with an Application for Injection-Attack Prevention","display_name":"A Quantified Model of Security Policies, with an Application for Injection-Attack Prevention","publication_year":2016,"publication_date":"2016-01-01","ids":{"openalex":"https://openalex.org/W2406283045","mag":"2406283045"},"language":"en","primary_location":{"id":"pmh:oai:digitalcommons.usf.edu:etd-7329","doi":null,"is_oa":true,"landing_page_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","pdf_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"USF Tampa Graduate Theses and Dissertations","raw_type":"dissertation"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070040932","display_name":"Donald Ray","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Donald Ray","raw_affiliation_strings":["University of South Florida"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Florida","institution_ids":["https://openalex.org/I2613432"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5070040932"],"corresponding_institution_ids":["https://openalex.org/I2613432"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6714000105857849,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6714000105857849,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.2296999990940094,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.03629999980330467,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-policy","display_name":"security policy","score":0.890999972820282},{"id":"https://openalex.org/keywords/safety-policy","display_name":"safety policy","score":0.734000027179718},{"id":"https://openalex.org/keywords/security-metrics","display_name":"security metrics","score":0.921999990940094},{"id":"https://openalex.org/keywords/injection-attacks","display_name":"injection attacks","score":0.9169999957084656},{"id":"https://openalex.org/keywords/code-injection","display_name":"code injection","score":0.6169999837875366}],"concepts":[{"id":"https://openalex.org/C15569618","wikidata":"https://www.wikidata.org/wiki/Q3561421","display_name":"Liveness","level":2,"score":0.983731210231781},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7427341341972351},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7050759196281433},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.5275466442108154},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4937673509120941},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.48308423161506653},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32707130908966064},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1622183620929718},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.13602319359779358},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09053733944892883},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:digitalcommons.usf.edu:etd-7329","doi":null,"is_oa":true,"landing_page_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","pdf_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"USF Tampa Graduate Theses and Dissertations","raw_type":"dissertation"},{"id":"pmh:oai:scholarcommons.usf.edu:etd-7329","doi":null,"is_oa":false,"landing_page_url":"https://scholarcommons.usf.edu/etd/6133","pdf_url":null,"source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Graduate Theses and Dissertations","raw_type":"text"},{"id":"mag:2406283045","doi":null,"is_oa":false,"landing_page_url":"https://digitalcommons.usf.edu/cgi/viewcontent.cgi?article=7329&context=etd","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:digitalcommons.usf.edu:etd-7329","doi":null,"is_oa":true,"landing_page_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","pdf_url":"https://digitalcommons.usf.edu/context/etd/article/7329/viewcontent/etd__6133.pdf","source":{"id":"https://openalex.org/S4377196272","display_name":"Digital Commons - University of South Florida (University of South Florida)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2613432","host_organization_name":"University of South Florida","host_organization_lineage":["https://openalex.org/I2613432"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"USF Tampa Graduate Theses and Dissertations","raw_type":"dissertation"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2406283045.pdf","grobid_xml":"https://content.openalex.org/works/W2406283045.grobid-xml"},"referenced_works_count":102,"referenced_works":["https://openalex.org/W23242426","https://openalex.org/W52251546","https://openalex.org/W63046450","https://openalex.org/W67460217","https://openalex.org/W97218881","https://openalex.org/W124025667","https://openalex.org/W140362640","https://openalex.org/W190850219","https://openalex.org/W207332311","https://openalex.org/W322598024","https://openalex.org/W336805188","https://openalex.org/W1511560695","https://openalex.org/W1559067492","https://openalex.org/W1582331515","https://openalex.org/W1584837050","https://openalex.org/W1587970460","https://openalex.org/W1598083179","https://openalex.org/W1854214752","https://openalex.org/W1964831830","https://openalex.org/W1973048906","https://openalex.org/W1973641744","https://openalex.org/W1975452830","https://openalex.org/W1977764760","https://openalex.org/W1978884755","https://openalex.org/W1984478483","https://openalex.org/W1985929316","https://openalex.org/W1986633888","https://openalex.org/W1987983106","https://openalex.org/W1989892116","https://openalex.org/W1994571662","https://openalex.org/W1994865005","https://openalex.org/W1997389706","https://openalex.org/W1999436718","https://openalex.org/W2008158744","https://openalex.org/W2008332764","https://openalex.org/W2008857097","https://openalex.org/W2009470162","https://openalex.org/W2012929681","https://openalex.org/W2022292029","https://openalex.org/W2026642666","https://openalex.org/W2030014066","https://openalex.org/W2030231203","https://openalex.org/W2032221098","https://openalex.org/W2036910349","https://openalex.org/W2037786632","https://openalex.org/W2040246974","https://openalex.org/W2050869006","https://openalex.org/W2053079011","https://openalex.org/W2056277260","https://openalex.org/W2067955804","https://openalex.org/W2073097601","https://openalex.org/W2078144659","https://openalex.org/W2081665140","https://openalex.org/W2082554729","https://openalex.org/W2084146220","https://openalex.org/W2084168235","https://openalex.org/W2085977348","https://openalex.org/W2087811006","https://openalex.org/W2088475168","https://openalex.org/W2095260376","https://openalex.org/W2097151854","https://openalex.org/W2103317919","https://openalex.org/W2104219297","https://openalex.org/W2104387213","https://openalex.org/W2104564000","https://openalex.org/W2107018485","https://openalex.org/W2108376255","https://openalex.org/W2108780652","https://openalex.org/W2109387928","https://openalex.org/W2109957487","https://openalex.org/W2113310679","https://openalex.org/W2125140474","https://openalex.org/W2125666604","https://openalex.org/W2129362719","https://openalex.org/W2129586531","https://openalex.org/W2131261404","https://openalex.org/W2132704120","https://openalex.org/W2134296086","https://openalex.org/W2135289568","https://openalex.org/W2141126977","https://openalex.org/W2141289698","https://openalex.org/W2143396794","https://openalex.org/W2144696387","https://openalex.org/W2146949683","https://openalex.org/W2148001343","https://openalex.org/W2152976548","https://openalex.org/W2160721988","https://openalex.org/W2162022335","https://openalex.org/W2162171351","https://openalex.org/W2162297215","https://openalex.org/W2165064701","https://openalex.org/W2166381878","https://openalex.org/W2167136065","https://openalex.org/W2172252437","https://openalex.org/W2230840043","https://openalex.org/W2253805791","https://openalex.org/W2288937291","https://openalex.org/W2482903976","https://openalex.org/W2705146753","https://openalex.org/W2738444131","https://openalex.org/W2912565176","https://openalex.org/W2914206182"],"related_works":["https://openalex.org/W2288937291","https://openalex.org/W2777297765","https://openalex.org/W2036440331","https://openalex.org/W7030029308","https://openalex.org/W2094443606","https://openalex.org/W32541175","https://openalex.org/W3021327114","https://openalex.org/W3136437581","https://openalex.org/W2160542880","https://openalex.org/W17764271"],"abstract_inverted_index":{"This":[0,22],"dissertation":[1],"generalizes":[2],"traditional":[3,38],"models":[4],"of":[5,10,17,40,47,57,65,84,124,131,144,175],"security":[6,114],"policies,":[7],"from":[8,26,37,129],"specifications":[9,16,130],"whether":[11],"programs":[12,20],"are":[13,35,128,159,163],"secure,":[14],"to":[15,30,45,113,138],"how":[18,125,132],"secure":[19,126,133],"are.":[21],"is":[23,69,94],"a":[24,70,85,89,107,120],"generalization":[25,98],"qualitative,":[27],"black-and-white":[28],"policies":[29,44,148,162],"quantitative,":[31],"gray":[32],"policies.":[33,51],"Included":[34],"generalizations":[36,53],"definitions":[39,46],"safety":[41,58,66,87],"and":[42,49,59,67,74,88,116,156],"liveness":[43,68,91],"gray-safety":[48],"gray-liveness":[50],"These":[52,161],"preserve":[54],"key":[55],"properties":[56],"liveness,":[60],"including":[61,102],"that":[62,75,96,103,117,172],"the":[63,82,97,142,145,176],"intersection":[64],"unique":[71],"allow-all":[72],"policy":[73,77],"every":[76],"can":[78],"be":[79],"written":[80],"as":[81,106],"conjunction":[83],"single":[86,90],"policy.":[92],"It":[93],"argued":[95],"provides":[99],"several":[100],"benefits,":[101],"it":[104,118],"serves":[105],"unifying":[108],"framework":[109],"for":[110,149,168,182],"disparate":[111],"approaches":[112],"metrics,":[115],"separates\u2014in":[119],"practically":[121],"useful":[122],"way\u2014specifications":[123],"systems":[127,137],"users":[134],"require":[135],"their":[136],"be.":[139],"To":[140],"demonstrate":[141],"usefulness":[143],"new":[146],"model,":[147],"mitigating":[150],"injection":[151,170,184],"attacks":[152,171],"(including":[153],"both":[154],"code-":[155],"noncode-injection":[157],"attacks)":[158],"explored.":[160],"based":[164],"on":[165],"novel":[166],"techniques":[167],"detecting":[169],"avoid":[173],"many":[174],"problems":[177],"associated":[178],"with":[179],"existing":[180],"mechanisms":[181],"preventing":[183],"attacks.":[185]},"counts_by_year":[],"updated_date":"2026-09-16T18:09:00.828671","created_date":"2016-06-24T00:00:00"}