Imperial College London

Professor Emil Lupu

Faculty of EngineeringDepartment of Computing

Professor of Computer Systems
 
 
 
//

Contact

 

e.c.lupu Website

 
 
//

Location

 

564Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Publication Type
Year
to

232 results found

Lee TK, Yusuf S, Luk W, Sloman M, Lupu E, Dulay N, Lee TK, Yusuf S, Luk W, Sloman M, Lupu E, Dulay Net al., 2002, Development framework for firewall processors, New York, IEEE international conference on field-programmable technology (FPT), Chinese University of Hong Kong, New Territories, Peoples Republic of China, 2002, Publisher: IEEE, Pages: 352-355

High-performance firewalls can benefit from the increasing size, speed and flexibility of advanced reconfigurable hardware. However direct translation of conventional firewall rules in a router-based rule set often leads to inefficient hardware implementation. Moreover, such lowlevel description of firewall rules tends to be difficult to manage and to extend. We describe a framework, based on the high-level policy specification language Ponder for capturing firewall rules as authorization policies with user-definable constraints. Our framework supports optimisations to achieve efficient utilisation of hardware resources. A pipelined firewall implementation developed using this approach running at 10 MHz is capable of processing 2.5 million packets per second, which provides similar performance to a version without optimisation and is about 50 times faster than a software implementation running on a 700 MHz PIII processor.

Conference paper

Keoh SL, Lupu E, Keoh S L, Lupu Eet al., 2002, Towards flexible credential verification in mobile ad-hoc Networks, International workshop on principles of mobile computing; POMC'02, Publisher: ACM, Pages: 58-65

Conference paper

Sloman M, Lupu E, 2002, Security and management policy specification, IEEE NETWORK, Vol: 16, Pages: 10-19, ISSN: 0890-8044

Policies are rules governing the choices in behavior of a system. They are increasingly being used as a means of implementing flexible and adaptive systems for management of Internet services, networks, and security systems. There is also a need for a common specification of security policy for large-scale multi-organizational systems where access control is implemented in a variety of heterogeneous components. In this article we survey both security and management policy specification approaches, concentrating on practical systems in which the policy specification can be directly translated into an implementation.

Journal article

Lymberopoulos L, Lupu E, Sloman M, 2002, An adaptive policy based management framework for differentiated services networks, Los Alamitos, 3rd international workshop on policies for distributed systems and networks, Monterery, California, 2002, Publisher: IEEE Computer Soc, Pages: 147-158

Conference paper

Damianou N, Dulay N, Lupu E, Sloman M, Tonouchi T, Damianou N, Dulay N, Lupu E, Sloman A, Tonouchi T, Damianou N, Dulay N, Lupu E, Sloman M, Tonouchi Tet al., 2002, Tools for domain-based policy management of distributed systems, New York, 8th IEEE/IFIP Network Operations and Management Symposium (NOMS 2002), Publisher: IEEE, Pages: 203-217

The management of policies In large-scale systems is complex because of the potentially large number of policies and administrators, as well as the diverse types of information that need to be managed. Appropriate tool support is essential to make management practical and feasible. In this paper we present the implementation of an integrated toolkit for the specification, deployment and management of policies specified in the PONDER language. PONDER policies provide a powerful framework for managing distributed systems which includes explicit domain-based subject and target specifications as well as a flexible life-cycle and deployment model. Domains, Implemented using LDAP directories, are used for storing policies and grouping resources, people, and the entities which implement policy, thus facilitating the automated dissemination of policy information. The toolkit presented in this paper comprises: a policy compiler, used to generate implementation code for heterogeneous management and security platforms, a hyperbolic tree viewer for efficient manipulation of the domain structure and effective navigation across the domains, and various tools for deploying and managing the policy life-cycle.

Conference paper

Dulay N, Damianou N, Lupu E, Sloman M, Dulay N, Damianou N, Lupu E, Sloman M, Dulay N, Damianou N, Lupu E, Sloman Met al., 2002, A policy language for the management of distributed agents, Berlin, Agent-oriented software engineering, AOSE 2001, Publisher: Springer, Pages: 84-100, ISSN: 0302-9743

Conference paper

Lee TK, Yusuf S, Luk W, Sloman M, Lupu E, Dulay N, Lee TK, Yusuf S, Luk W, Sloman M, Lupu E, Dulay Net al., 2002, Compiling policy descriptions into reconfigurable firewall processors, IEEE conference on field programmable technology, (FPT 02), Hong Kong, December 2002

Conference paper

Lymberopoulos L, Lupu E, Sloman M, 2002, An adaptive policy based management framework for differentiated services networks, Los Alamitos, 3rd international workshop on policies for distributed systems and networks, Monterery, California, 2002, Publisher: IEEE Computer Soc, Pages: 147-158

Conference paper

Ganesarajah D, Lupu E, 2002, Workflow-based composition of web-services: a business model or a programming paradigm?, Los Alamitos, 6th international enterprise distributed object computing, Lausanne, Switzerland, 2002, Publisher: IEEE Computer Soc, Pages: 273-284

Conference paper

Lupu E, Mazumdar S, Stadler R, 2001, Selected topics in network and systems management, COMPUTER NETWORKS-THE INTERNATIONAL JOURNAL OF COMPUTER AND TELECOMMUNICATIONS NETWORKING, Vol: 35, Pages: 1-4, ISSN: 1389-1286

Journal article

Sloman M, Lobo J, Lupu E, 2001, Preface, ISBN: 3540416102

Book

Dulay N, Lupu E, Sloman M, Damianou Net al., 2001, A policy deployment model for the ponder language, Piscataway, NJ, Integrated network management: 2001 IEEE/IFIP integrated management strategies for the new millennium, Publisher: IEEE, Pages: 529-544

Conference paper

Dulay N, Lupu E, Sloman M, Damianou Net al., 2001, A policy deployment model for the ponder language, Piscataway, NJ, Integrated network management: 2001 IEEE/IFIP integrated management strategies for the new millennium, Publisher: IEEE, Pages: 529-544

Conference paper

, 2001, Policies for Distributed Systems and Networks, International Workshop, POLICY 2001 Bristol, UK, January 29-31, 2001, Proceedings, Publisher: Springer

Conference paper

Corradi A, Montanari R, Lupu E, Stefanelli Cet al., 2001, Policy controlled mobility, Workshop on software engineering and mobility, Toronto, Ontario, Canada, May 2001

Conference paper

Wang G, Lupu E, Wegmann A, 2001, Proceedings of the 5th IEEE Enterprise Distributed Object Computing Conference, Seattle, USA, September 2001, Publisher: IEEE CS Press

Book

Sloman M, Lobo J, Lupu E, 2001, Policies for distributed systems and networks: international workshop, POLICY 2001, Bristol, UK, January 2001, Publisher: Springer-Verlag, ISBN: 9783540416104

Book

Dulay N, Lupu E, Sloman M, Damianou Net al., 2001, A policy deployment model for the ponder language, Piscataway, NJ, Integrated network management: 2001 IEEE/IFIP integrated management strategies for the new millennium, Publisher: IEEE, Pages: 529-544

Conference paper

Corradi A, Dulay N, Montanari R, Stefanelli Cet al., 2001, Policy-driven management of agent systems, Berlin, International workshop on policies for distributed systems and networks (POLICY 2001), Hewlett-Packard Lab, Bristrol, England, Publisher: Springer-Verlag, Pages: 214-229

Conference paper

Damianou N, Dulay N, Lupu E, Sloman Met al., 2001, The Ponder policy specification language, Berlin, International workshop on policies for distributed systems and networks (POLICY 2001), Hewlett-Packard Lab, Bristrol, England, Publisher: Springer-Verlag, Pages: 18-38

Conference paper

Damianou N, Dulay N, Lupu E, Sloman Met al., 2001, The Ponder policy specification language, Berlin, International workshop on policies for distributed systems and networks (POLICY 2001), Hewlett-Packard Lab, Bristrol, England, Publisher: Springer-Verlag, Pages: 18-38

The Ponder language provides a common means of specifying security policies that map onto various access control implementation mechanisms for firewalls, operating systems, databases and Java. It supports obligation policies that are event triggered condition-action rules for policy based management of networks and distributed systems, Ponder can also be used for security management activities such as registration of users or logging and auditing events for dealing with access to critical resources or security violations. Key concepts of the language include roles to group policies relating to a position in an organisation, relationships to define interactions between roles and management structures to define a configuration of roles and relationships pertaining to an organisational unit such as a department. These reusable composite policy specifications cater for the complexity of large enterprise information systems. Ponder is declarative, strongly-typed and object-oriented which makes the language flexible, extensible and adaptable to a wide range of management requirements.

Conference paper

Sloman M, Lobo J, Lupu E, 2001, Policies for distributed systems and networks: international workshop, POLICY 2001, Bristol, UK, January 2001, Publisher: Springer-Verlag, ISBN: 9783540416104

Book

Damianou N, Dulay N, Lupu EC, Sloman MS, Damianou N, Dulay N, Lupu EC, Sloman MS, Damianou N, Dulay N, Lupu EC, Sloman MSet al., 2000, Ponder: An Object-oriented Language for Specifying Security and Management Policies, 10th Workshop for PhD Students in Object-Oriented Systems (PhDOOS'2000), Sophia Antipolis, France

Conference paper

Lupu E, Sloman M, Dulay N, Damianou Net al., 2000, Ponder: Realising enterprise viewpoint concepts, 4th International Conference on Enterprise Distributed Object Computing (EDOC 2000), Pages: 66-75

This paper introduces the Ponder language for specifying distributed object enterprise concepts. Ponder, is a declarative language, which permits the specification of policies in terms of obligations, permissions and prohibitions and provides the means for defining roles, relationships and their configurations in nested communities. Ponder provides a concrete representation of most of the concepts of the Enterprise Viewpoint. The design of the language incorporates lessons dl awn from sever al yeats of research on policy for security and distributed systems management as well as policy conflict analysis. The various language constructs are presented through a scenario for the operation, administration and maintenance of a mobile telecommunication network.

Conference paper

Damianou N, Dulay N, Lupu EC, Sloman MSet al., 2000, Ponder: A Language for Specifying Security and Management Policies for Distributed Systems, The Language Specification - Version 2.2, Imperial College, Department of Computing

Report

Corradi A, Montanari R, Stefanelli C, Lupu EC, Sloman MS, Corradi A, Montanari R, Stefanelli C, Lupu EC, Sloman MSet al., 2000, Flexible Access Control for Java Mobile Code, 16th Annual Computer Security Applications Conference (ACSAC2000), New Orleans USA

Conference paper

Dulay N, Lupu EC, Sloman MS, Damianou Net al., 2000, Towards a Runtime Object Model for the Ponder Policy Language, 7th Workshop of the Open View University Association (OVUA 2000), Santorini, Greece

Conference paper

Lupu EC, Dulay N, Damianou N, Sloman MSet al., 2000, Structuring Devolved Responsibilities in Network and Systems Management, Networking and Information Systems Journal, Vol: 3, Pages: 261-277

Journal article

Damianou N, Dulay N, Lupu EC, Sloman MSet al., 2000, Managing Security in Object-Based Systems Using Ponder, 6th EUNICE Open European Summer School, Enschede, The Netherlands

Conference paper

Dulay N, Lupu EC, Sloman MS, Damianou Net al., 2000, Towards a Runtime Object Model for the Ponder Policy Language, 7th Workshop of the Open View University Association (OVUA 2000), Santorini, Greece

Conference paper

This data is extracted from the Web of Science and reproduced under a licence from Thomson Reuters. You may not copy or re-distribute this data in whole or in part without the written consent of the Science business of Thomson Reuters.

Request URL: http://wlsprd.imperial.ac.uk:80/respub/WEB-INF/jsp/search-html.jsp Request URI: /respub/WEB-INF/jsp/search-html.jsp Query String: id=00155030&limit=30&person=true&page=7&amp%3bid=00155030&amp%3brespub-action=search.html&amp%3bperson=true&respub-action=search.html&amp%3bpage=5