ESPANOLA - Evolutionary Security Policy Analysis Language

Protecting critical information assets requires more than a best effort, it requires proof that the assets are protected. Proof requires formal analysis relying on solid foundations of mathematical analysis. However, field operators not trained in formal methods are responsible for managing the dynamic enterprise wide systems and ensuring the policy is correct. An integrated system is required that combines an easy to use paradigm with automatic verification of policy changes. Our solution called ESPANOLA creates simple to use policy objects for field operators. Each policy object contains the verification and mission requirements necessary to ensure any changes are automatically verified. This system can then be used to very policy changes in response to an attack, and automatically strength the security policy when the system is not under attack.