Dan Thomsen's guest appearances

Dan Thomsen

CERIAS Weekly Security Seminar - Purdue University

FCMR Frederikshavn taleradio

Ryan Henry

Cory Doctorow

Doug Smith

Larry Ponemon

George Heron

Laura Thomas

Eli Lilly

Stephen Elliott

Tony Sager

David Carroll

Jan Hammer

Jack Daniel

Joe Judge

Chris Reed

Richard III

OwlTail

Vi har besøg af strandbynitten Dan Thomsen, der er født i 1945. Han fortæller om et spændende liv i Strandby, hvor hanRead More

Vi har besøg af strandbynitten Dan Thomsen, der er født i 1945. Han fortæller om et spændende liv i Strandby, hvor han<a href="https://fcmr.dk/2020/11/16/interview-med-dan-thomsen/" rel="nofollow" target="_blank">Read More</a>

Interview med Dan Thomsen

Most people now realize that computer security is hard.  However, many people do not realize that creating a correct security policy is hard.  Creating an accurate security policy is on the order of complexity of developing software in general.  In particular how can you show the policy is correct?The focus of this seminar is to look at tools and techniques for showing that the mandatory security policy based on type enforcement meets its objectives.  The approach breaks down the security policy objectives so that they can be studied in terms of information flows. The policies are specified for the Security Enhanced Linux type enforcement mechanism.  Type enforcement and mandatory access control will also be discussed. About the speaker: Dan Thomsen is a Senior Research Scientist at Tresys Technology.  In his seventeen year career, Mr. Thomsen has provided contributions to a wide range of computer security programs.  They include the increasing the security and survivability of the Joint Battlespace Infosphere, security assessment for the Cougaar agent system, development of the high security LOCK multilevel security platform, secure database research, and Internet vulnerability analysis. Mr. Thomsen was also the principle investigator responsible for the creation of the Napoleon policy management framework. Mr. Thomsen has published over twenty technical papers on computer security topics including type enforcement and role based access control. Mr. Thomsen currently serves as the program chair for the Annual Computer Security Applications Conference (ACSAC). Mr. Thomsen has a M.S. in Computer Science from the University of Minnesota and a B.A in Computer Science and Math from the University of Minnesota - Duluth. He is a senior member of IEEE and a member of IFIP working group 11.3 on Data and Application Security.

Most people now realize that computer security is hard. However, many people do not realize that creating a correct security policy is hard. Creating an accurate security policy is on the order of complexity of developing software in general. In particular how can you show the policy is correct? The focus of this seminar is to look at tools and techniques for showing that the mandatory security policy based on type enforcement meets its objectives. The approach breaks down the security policy objectives so that they can be studied in terms of information flows. The policies are specified for the Security Enhanced Linux type enforcement mechanism. Type enforcement and mandatory access control will also be discussed. About the speaker: Dan Thomsen is a Senior Research Scientist at Tresys Technology. In his seventeen year career, Mr. Thomsen has provided contributions to a wide range of computer security programs. They include the increasing the security and survivability of the Joint Battlespace Infosphere, security assessment for the Cougaar agent system, development of the high security LOCK multilevel security platform, secure database research, and Internet vulnerability analysis. Mr. Thomsen was also the principle investigator responsible for the creation of the Napoleon policy management framework. Mr. Thomsen has published over twenty technical papers on computer security topics including type enforcement and role based access control. Mr. Thomsen currently serves as the program chair for the Annual Computer Security Applications Conference (ACSAC). Mr. Thomsen has a M.S. in Computer Science from the University of Minnesota and a B.A in Computer Science and Math from the University of Minnesota - Duluth. He is a senior member of IEEE and a member of IFIP working group 11.3 on Data and Application Security.

Dan Thomsen, Information Flow Analysis in Security Enhanced Linux