A propositional policy algebra for access control

ACM Transactions on Information and System Security

Volumn 6, Issue 2, 2003, Pages 286-325

  Wijesekera, Duminda ^a   Jajodia, Sushil ^a  

^a GEORGE MASON UNIVERSITY   (United States)

Author keywords

Access control; Policy algebra; Policy composition; Security policy

Indexed keywords

ACCESS CONTROL; INFORMATION SYSTEMS; POLICY ALGEBRA; POLICY COMPOSITION; SECURITY POLICY;

ALGEBRA; DATABASE SYSTEMS; INFORMATION MANAGEMENT; MATHEMATICAL MODELS; PUBLIC POLICY; SECURITY OF DATA; SET THEORY;

INFORMATION TECHNOLOGY;

EID: 3142523600     PISSN: 10949224     EISSN: None     Source Type: Journal    
DOI: 10.1145/762476.762481     Document Type: Article

References (27)

1. ALPERN, B. AND SCHNEIDER, F. B. 1985. Defining liveness. Inf. Process. Lett. 21, 4, 181-185.
2. ALPERN, B. AND SCHNEIDER, F. B. 1987. Recognizing safety and liveness. Distributed Comput. 2, 117-126.
3. APT, K. R. 1997. Verification of Sequential and Concurrent Programs, 2nd ed. In Graduate Texts in Computer Science. Springer-Verlag, New York.
4. BAI, Y. AND VARADARAJAN, V. 1997. A logic for state transformations in authorization policies. In Proceedings of 10th IEEE Computer Security Foundations Workshop. 173-182.
5. BARRINGER, H. 1985. A Survey of Verification Techniques for Parallel Programs /. Lecture Notes in Computer Science, vol. 191. Springer-Verlag, Berlin.
6. BONATTI, P., DI VIMERCATI, S. D. C., AND SAMARATI, P. 2000. A modular approach to composing access control policies. In Proceedings of 7th ACM Conference on Communications and Security. 164-173.
7. CHANDRA, A., KOZEN, D., AND STOCKMEYER, L. 1981. Alternation. J. ACM 28, 1, 114-133.
8. GABBAY, D. M. 1981. Semantical Investigations in Heyting's Intuitionistic Logic, vol. 148. D. Riedel, London, UK.
9. GILGOR, V. D., GAVRILA, S. I., AND FERRAIOLO, D. 1998. On the formal definition of separation-of-duty policies and their compositions. In IEEE Computer Society Symposium on Research in Security and Privacy. 173-181.
10. GIRARD, J.-Y., LAFONT, Y., AND TAYLOR, P. 1989. Proofs and Types. Number 7 in Cambridge Tracts in Theoretical Computer Science. Cambridge University Press, Cambridge, U.K.
11. GLIGOR, V. D., GRAVRILLA, S. I., AND FERRAIOLO, D. 1998. On the formal definition of seperation-of-duty policies and their composition. In Proceedings of the IEEE Symposium on Research in Security and Privacy. (Oakland, CA.), 172-183.
12. HAREL, D. 1979. First Order Dynamic Logic. Lecture Notes in Computer Science, vol. 68. Springer-Verlag, Berlin.
13. JAJODIA, S., BERTINO, E., AND SAMARATI, P. 1999. A flexible authorization mechanism for relational data management. ACM Trans. Inf. Syst. 17, 9, 01-140.
14. JAJODIA, S., KUDO, M., AND SUBRAHMANIAN, V. S. 2001. Provisional authorizations. In Recent Advances in Secure and Private E-Commerce, A. Ghosh, Ed. Kluwer Academic Publishers, Boston. 133-159.
15. JAJODIA, S., SAMARATI, P., SAPINO, M.-L., AND SUBRAHMANIAN, V. S. 2001. Flexible support for multiple access control policies. ACM Trans. Database Syst. 26, 2, 214-260.
16. JAJODIA, S., SAMARATI, P., AND SUBRAHMANIAN, V. S. 1997a. A logical language for expressing authorizations. In Proceedings of IEEE Symposium on Security and Privacy (Oakland, CA), 31-42.
17. JAJODIA, S., SAMARATI, P., SUBRAHMANIAN, V. S., AND BERTINO, E. 1997b. A unified framework for enforcing multiple access control policies. In Proceedings of ACM SIGMOD International Conference on Management of Data (Tucson, AZ), 474-485.
18. KOZEN, D. C. 1999. Language based security. Tech. Rep. TR- 99-1775, Department of Computer Science, Cornell University.
19. KUDO, M. AND HADA, S. 2000. Xml document security based on provisional authorizations. In Proceedings of the 7th ACM Conference on Computer and Communications Security. 87-96.
20. MANNA, Z. 1970. The correctness of nondeterministic programs, Artificial Intelligence 1, 1-26.
21. McLEAN, J. 1994. A general theory of composition for trace sets closed under selective interleaving functions. In Proceedings of IEEE Symposium on Security and Privacy (Oakland, CA), 79-93.
22. McLEAN, J. 1996. A general theory of composition for a class of "possibilistic" properties. IEEE Trans. Softw. Eng. 22, 1, 53-67.
23. McLEAN, J. 1998. Algebra of security. In Proceedings of IEEE Symposium on Security and Privacy (Oakland, CA), 2-7.
24. PELEG, D. 1987. Concurrent dynamic logic. J. ACM 34, 2, 450-479.
25. SCHNEIDER, F. B. 1998. Enforceable security policies. Tech. Rep. TR 98-1664, Department of Computer Science, Cornell University.
26. SIMON, R. T. AND ZURKO, M. E. 1997. Separation of duty in role-based environments. In Proceedings of 10th IEEE Computer Security Foundations Workshop. 183-194.
27. WIJESEKERA, D. AND JAJODIA, S. 2001. Policy algebras for access control - the propositional case. In Proceedings of the 8th ACM Conference on Computer and Communications Security. 38-47.