Flexible access control policy specification with constraint logic programming

ACM Transactions on Information and System Security

Volumn 6, Issue 4, 2003, Pages 501-546

  Barker, Steve ^a   Stuckey, Peter J ^b  

^a KING'S COLLEGE LONDON   (United Kingdom)

^b UNIVERSITY OF MELBOURNE   (Australia)

Author keywords

Constraint logic programming; Role based access control

Indexed keywords

AUTHORIZATION; CONSTRAINT LOGIC PROGRAMMING; CONTROL POLICY; ROLE-BASED ACCESS CONTROL;

COMPUTER PROGRAMMING LANGUAGES; CONSTRAINT THEORY; MATHEMATICAL MODELS; PROBLEM SOLVING; PUBLIC POLICY; RELATIONAL DATABASE SYSTEMS;

LOGIC PROGRAMMING;

EID: 3042584122     PISSN: 10949224     EISSN: None     Source Type: Journal    
DOI: 10.1145/950191.950194     Document Type: Article

References (33)

1. AHN, G. AND SANDHU, R. 2000. Role-based authorization constraints specification. ACM Trans. on Information and System Security 3, 4, 206-227.
2. ATLURI, V. AND HUANG, W. 1996. An authorization model for workflows. In ESORICS'96. LNCS, vol. 1146. Springer, Berlin, 44-64.
3. BARKER, S. 2000a. Data protection by logic programming. In Proceedings of 1st International Conference on Computational Logic. LNAI, vol. 1861. Springer, Berlin, 1300-1314.
4. BARKER, S. 2000b. Protecting deductive databases from unauthorized retrievals. In DBSec 2000. Kluwer, Dordrecht, The Netherlands, 301-311.
5. N: A temporal authorization model. In Information Assurance in Computer Networks. Methods, Models and Architectures for Network Security. H. Gorodetski, V. Skormin, and L. Popyack, Eds. LNCS, vol. 2052. Springer, Berlin, 178-188.
6. BARKER, S. AND ROSENTHAL, A. 2001. Flexible security policies in SQL. In DBSec 2001. Kluwer, Dordrecht, The Netherlands, 167-180.
7. BERTINO, E., BETTINI, C., FERRARI, E., AND SAMARATI, P. 1998. An access control model supporting periodicity constraints and temporal reasoning. ACM TODS 23, 3, 231-285.
8. BERTINO, E., BONATTI, P., AND FERRARI, E. 2000. TRBAC: A temporal role-based access control model. In Proceedings of 5th ACM Workshop on Role-Based Access Control, 21-30.
9. BERTINO, E., CATANIA, B., FERRARI, E., AND PERLASCA, P. 2002. A system to specify and manage multipolicy access control models. In Proceedings of POLICY 2002. IEEE Computer Society Press, Los Alamitos, CA, 116-127.
10. CASTANO, S., FUGINI, M., MARTELLA, G., AND SAMARATI, P. 1995. Database Security. Addison-Wesley, Reading, MA.
11. CAVEDON, L. AND LLOYD, J. 1989. A completeness theorem for SLDNF resolution. JLP 7, 3, 177-192.
12. DATE, C. 2000. An Introduction to Database Systems. Addison-Wesley, Reading, MA.
13. FERRAIOLO, D., CUGINI, J., AND KUHN, R. 1995. Role-based access control (RBAC): Features and motivations. In Proceedings of the 11th Annual Computer Security Applications Conference, 241-248.
14. GELFOND, M. AND LIFSCHITZ, V. 1988. The stable model semantics for logic programming. In Proceedings of 5th International Conference and Symposium on Logic Programming. R. Kowalski and K. Bowen, Eds. MIT Press, Cambridge, MA, 1070-1080.
15. GENAIM, S. AND CODISH, M. 2001. Inferring termination conditions for logic programs using backwards analysis. In Proceedings of 8th International Conference on Logic for Programming, Artificial Intelligence, and Reasoning. R. Nieuwenhuis and A. Voronkov, Eds. Lecture Notes in Computer Science, vol. 2250. Springer, Berlin, 685-694.
16. GRECO, S., LEONE, N., AND RULLO, P. 1992. Complex: An object-oriented logic programming system. IEEE TKDE 4, 4, 72-87.
17. JAFFAR, J., MICHAYLOV, S., STUCKEY, P., AND YAP, R. 1992. The CLP(ℛ) language and system. ACM Trans. Program. Lang. Syst. 14, 3, 339-395.
18. JAJODIA, S., SAMARATI, P., SAPINO, M., AND SUBRAHMANINAN, V. 2001. Flexible support for multiple access control policies. ACM TODS 26, 2, 214-260.
19. KELLY, A., MACDONALD, A., MARRIOTT, K., AND STUCKEY, P. 1998. Optimizing compilation for CLP(ℛ). ACM Trans. Program. Lang. Syst. 20, 6, 1223-1250.
20. KOWALSKI, R. 1979. Logic for Problem Solving. Elsevier-North Holland, Amsterdam.
21. LOYD, J. 1987. Foundations of Logic Programming. Springer, Berlin.
22. MARRIOTT, K., SONDERGAARD, H., AND DART, P. 1990. A characterization of non-floundering logic programs. In Proceedings of the 1990 North American Conference on Logic Programming. MIT Press, Cambridge, MA.
23. MARRIOTT, K. AND STUCKEY, P. 1998. Programming with Constraints: An Introduction. MIT Press, Cambridge, MA.
24. PRZYMUSINSKI, T. 1988. On the declarative semantics of deductive databases and logic programming. In Foundations of Deductive Databases and Logic Programming. J. Minker, Ed. Morgan-Kaufmann, San Mateo, CA, 193-216.
25. REITER, R. 1980. A logic for default reasoning. Artificial Intelligence 13, 81-132.
26. SANDHU, R., BHAMIDIPATI, V., COYNE, E., GANTA, S., AND YOUMAN, C. 1997. The ARBAC97 model for role-based administration of roles: Preliminary description and outline. In Proceedings 2nd ACM Workshop on Role-Based Access Control, 41-49.
27. SANDHU, R., COYNE, E., FEINSTEIN, H., AND YOUMAN, C. 1996. Role-based access control models. IEEE Computer 29, 2, 38-47.
28. SANDHU, R., FERRAIOLO, D., AND KUHN, R. 2000. The NIST model for role-based access control: Towards a unified standard. In Proceedings of 4th ACM Workshop on Role-Based Access Control, 47-61.
29. SICStus 1999. Sicstus prolog home page. http://www.sics.se/sicstus/.
30. SPEIRS, C., SOMOGYI, Z., AND SØNDERGAARD, H. 1997. Termination analysis for mercury. In Proceedings of 4th International Symposium on Static Analysis. P. V. Hentenryck, Ed. Lecture Notes in Computer Science, vol. 1302. Springer, Berlin, 160-171.
31. STERLING, L. AND SHAPIRO, E. 1994. The Art of PROLOG. MIT Press, Cambridge, MA.
32. STUCKEY, P. 1995. Negation and constraint logic programming. Information and Computation 118, 1, 12-33.
33. Woo, T. AND LAM, S. 1993. Authorizations in distributed systems: A new approach. Journal of Computer Security 2, 2/3, 107-136.