The Dynamic-Typed Access Matrix Model and Decidability of the Safety Problem

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences

Volumn E87-A, Issue 1, 2004, Pages 190-203

  Soshi, Masakazu ^a   Maekawa, Mamoru ^b   Okamoto, Eiji ^c  

^a JAPAN ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY   (Japan)

^b UNIVERSITY OF ELECTRO COMMUNICATIONS   (Japan)

^c UNIVERSITY OF TSUKUBA   (Japan)

Author keywords

Access control; Access matrix model; Computational complexity; Decidability; Safety problem

Indexed keywords

ACCIDENT PREVENTION; COMPUTABILITY AND DECIDABILITY; COMPUTATIONAL COMPLEXITY; CONTROL SYSTEMS; CRYPTOGRAPHY; GRAPHIC METHODS; INFORMATION ANALYSIS; MATHEMATICAL MODELS; PROBLEM SOLVING;

ACCESS CONTROL; ACCESS MATRIX MODEL; SAFETY PROBLEMS; TYPED ACCESS MATRIX (TAM);

SECURITY OF DATA;

EID: 0842288709     PISSN: 09168508     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (25)

1. D. Bailey, "A philosophy of security management," in Information Security: An Integrated Collection of Essays, ed. M.D. Abrams, S. Jajodia, and H.J. Podell, pp.98-110, IEEE Computer Society Press, 1995.
2. D.E. Bell and L.J. LaPadula, "Secure computer systems: Mathematical foundations and model," Technical Report ESD-TR-73-278-I, MITRE Corp., Bedford, MA, March 1973.
3. D.E.R. Denning, Cryptography and Data Security, Addison-Wesley Publishing, Reading, MA, 1982.
4. S.N. Foley, L. Gong, and X. Qian, "A security model of dynamic labeling providing a tiered approach to verification," Proc. IEEE Symposium on Security and Privacy, pp.142-153, 1996.
5. S. Ganta, Expressive Power of Access Control Models Based on Propagation of Rights, PhD Thesis, Laboratory for Information Security Technology (LIST), George Mason University, 1996.
6. M.R. Garey and D.S. Johnson, Computers and Intractability - A Guide to the Theory of NP-completeness, W.H. Freeman and Co., 1979.
7. M.A. Harrison and W.L. Ruzzo, "Monotonic protection systems," in Foundations of Secure Computations, ed. R.A. DeMillo, D.P. Dobkin, A.K. Jones, and R.J. Lipton, pp.337-365, Academic Press, 1978.
8. M.A. Harrison, W.L. Ruzzo, and J.D. Ullman, "Protection in operating systems," Commun. ACM, vol.19, no.8, pp.461-471, Aug. 1976.
9. G.J. Holzmann, Design and Validation of Computer Protocols, Prentice-Hall, 1991.
10. International Organization of Standardization (ISO), International standard ISO/IEC 15408, 1999. Technically identical to Common Criteria version 2.1.
11. A.K. Jones, R.J. Lipton, and L. Snyder, "A linear time algorithm for deciding security," 17th Annual Symposium on Foundations of Computer Science, pp.33-41, Houston, TX, Oct. 1976.
12. C.E. Landwehr, "Protection (security) models and policy," in The Computer Science and Engineering Handbook, ed. A.B. Tucker, Jr., chapter 90, pp. 1914-1928, CRC Press, Boca Raton, FL, 1997.
13. M. Maekawa, A.E. Oldehoeft, and R.R. Oldehoeft, Operating Systems - Advanced Concepts, The Benjamin/Cummings Publishing Company. 1987.
14. J. MCLean, "Security models," in Encyclopedia of Software Engineering, ed. J.J. Marciniak, vol.2, pp.1136-1145, John Wiley & Sons, 1994.
15. C. Meadows, "Policies for dynamic upgrading," in Database Security, IV: Status and Prospects, ed. S. Jajodia and C.E. Landwehr, pp.241-250, Elsevier Science Publishers B. V. (North-Holland), 1991.
16. R.S. Sandhu, "The schematic protection model: Its definition and analysis for acyclic attenuating schemes," J. ACM, vol.35, no.2, pp.404-432, April 1988.
17. R.S. Sandhu, "Expressive power of the schematic protection model," J. Comput. Security, vol.1, no.1, pp.59-98, 1992.
18. R.S. Sandhu, "The typed access matrix model," Proc. IEEE Symposium on Security and Privacy, pp.122-136, May 1992.
19. R.S. Sandhu, "Undecidability of the safety problem for the schematic protection model with cyclic creates," J. Comput. Syst. Sci., vol.44, no.1, pp.141-159. Feb. 1992.
20. R.S. Sandhu and S. Ganta, "Expressive power of the single-object typed access matrix model," in Computer Security Applications Conference, pp.184-194, Dec. 1993.
21. R.S. Sandhu and G.S. Suri, "Non-monotonic transformation of access rights," Proc. IEEE Symposium on Security and Privacy, pp.148-161, May 1992.
22. L. Snyder, "Formal models of capability-based protection systems," IEEE Trans. Comput., vol.C-30, no.3, pp.172-181, March 1981.
23. M. Soshi, Design, Safety Analysis, and Applications of the Access Control Model based on Dual Labels, PhD Thesis, Graduate School of Information Systems, University of Electro-Communications, March 1999.
24. M. Soshi, "Safety analysis of the dynamic-typed access matrix model," in Computer Security - ESORICS 2000: 6th European Symposium on Research in Computer Security, ed. F. Cuppens, Y. Deswarte, D. Gollmann, and M. Waidner, vol.1895 of Lecture Notes in Computer Science, pp. 106-121, Springer-Verlag, Oct. 2000.
25. M. Soshi, T. Kato, and M. Maekawa, "An access control model based on dual labels," Trans. IPSJ, vol.40, no.3, pp.1305-1314, March 1999.