Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: The security of complex infrastructures depends on many technical and organizational issues that need to be properly addressed by a security policy. For purpose of our discussion,  define a security policy as a document that states what is and what is not allod in a system during normal operation; it consists of a set of rules that could be expressed in formal, semi-formal or very informal language. In many contexts, a system can be considered secure and trustworthy if the policy enforced by its security administrator is trustworthy too; from this standpoint it is possible to evaluate the system security by evaluating its policy.#R##N##R##N#  present a policy-based methodology to formalize and compare policies, and a Security Metric to evaluate the security level that a system is able to grant. All the steps of the methodology will be illustrated with an operative approach, by directly applying it to a real case study: the semi-automated Cross Certification among Public Key Infrastructures.
['Valentina Casola', 'Antonino Mazzeo', 'Nicola Mazzocca', 'Valeria Vittorini']
I am writing a research paper on a idea A policy-based methodology for security evaluation: A Security Metric for Public Key Infrastructures
[{"from": "human", "value": "I am writing a research paper on a idea A policy-based methodology for security evaluation: A Security Metric for Public Key Infrastructures"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: The security of complex infrastructures depends on many technical and organizational issues that need to be properly addressed by a security policy. For purpose of our discussion,  define a security policy as a document that states what is and what is not allod in a system during normal operation; it consists of a set of rules that could be expressed in formal, semi-formal or very informal language. In many contexts, a system can be considered secure and trustworthy if the policy enforced by its security administrator is trustworthy too; from this standpoint it is possible to evaluate the system security by evaluating its policy.#R##N##R##N#  present a policy-based methodology to formalize and compare policies, and a Security Metric to evaluate the security level that a system is able to grant. All the steps of the methodology will be illustrated with an operative approach, by directly applying it to a real case study: the semi-automated Cross Certification among Public Key Infrastructures."}]