A scalable history-based policy engine

Proceedings - Seventh IEEE International Workshop on Policies for Distributed Systems and Networks, Policy 2006

Volumn 2006, Issue , 2006, Pages 103-112

  Gama, Pedro ^a   Ribeiro, Carlos ^a   Ferreira, Paulo ^a  

^a INESC ID   (Portugal)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL COMPLEXITY; COMPUTER PROGRAMMING LANGUAGES; CONTROL SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; KNOWLEDGE BASED SYSTEMS; OPTIMIZATION;

HIGHER-LEVEL POLICY LANGUAGES; HISTORY-BASED POLICIES; HISTORY-BASED SEMANTICS; SYSTEM ADMINISTRATORS;

PUBLIC POLICY;

EID: 33845403834     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2006.8     Document Type: Conference Paper

References (28)

1. J. Goguen and J. Meseguer, "Security policies and security models," in Proceedings of the IEEE Symp. Security and Privacy, California, USA, 1982.
2. T. Y. C. WOO and S. S. Lam, "Authorizations in distributed systems: A new approach," Journal of Computer Security, vol. 2, no. 2,3, pp. 107-136, 1993.
3. C. de Laat, G. Gross, L. Gommans, J. Vollbrecht, and D. Spence, "Rfc 2903 - generic AAA architecture," IETF, Tech. Rep., August 2000.
4. S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian, "Flexible support for multiple access control policies," ACM Transactions on Database Systems (TODS), vol. 26, no. 2, pp. 214-260, 2001.
5. A. Schaad and J. Moffett, "A framework for organisational control principles," in Proceedings of the 18th Annual Computer Security Applications Conference, Las Vegas, USA, 2002.
6. R. S. Sandhu and P. Samarati, "Access control: Principles and practice," IEEE Communications Magazine, vol. 32, no. 9, pp. 40-48, 1994.
7. Gligor, Gavrila, and Ferraiolo, "On the formal definition of separation-of-duty policies and their composition," in Proceedings of the 19th IEEE Computer Society Symposium on Researh in Security and Privacy, 1998.
8. M. J. Nash and K. R. Poland, "Some conundrums concerning separation of duty," in Proceedings of the 1990 IEEE Symposium on Security and Privacy, Oakland, USA, May 1990.
9. N. Minsky and V. Ungureanu, "Unified support for heterogenous security policies in distributed systems," in Proceedings of the 7th USENIX Security Symposium, Texas, USA., January 1998.
10. C. N. Ribeiro, A. Zúquete, P. Ferreira, and P. Guedes, "SPL: An access control language for security policies with complex constraints," in Proceedings of the Network and Distributed System Security Symposium, San Diego, California, Feb 2001.
11. R. T. Simon and M. E. Zurko, "Separation of duty in role-based environments," in Proceedings of the IEEE Computer Security Foundations Workshop, 1997.
12. J. Lobo, R. Bhatia, and S. Naqvi, "A policy description language," in Proceedings of the National Conference of the American Association for Artificial Intelligence, Florida, USA, 1999.
13. P. Gama and P. Ferreira, "Obligation policies: An enforcement platform," in Proceedings of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'05), Stockholm, Sweden, June 2005.
14. S. Cantor, J. Kemp, R. Philpott, and E. Maler, "Assertions and protocols for the oasis security assertion markup language (saml) v2.0," OASIS, Tech. Rep., March 2005.
15. P. Dias, C. Ribeiro, and P. Ferreira, "Enforcing history-based security policies in mobile agent systems," in Proceedings of the IEEE 4th International Workshop on Policies for Distributed Systems and Networks, Lake Como, Italy, 2003.
16. N. Minsky and V. Ungureanu, "Law-governed interaction: A coordination & control mechanism for heterogeneous distributed systems," ACM Trans. Software Eng. and Methodology, vol. 9, no. 3, pp. 273-305, July 2000.
17. N. Minsky, Y. M. Minsky, and V. Ungureanu, "Making tuple spaces safe for heterogeneous distributed systems," in Proceedings of the 2000 ACM Symposium on Applied Computing, Como, Italy, 2000, pp. 218-226.
18. T. Moses, "extensible access control markup language (xacml) version 2.0," OASIS, Tech. Rep., February 2005.
19. S. Kent, T. Maibaum, and W. Quirk, "Formally specifying temporal constraints and error recovery," in Proceedings of the RE'93 - 1st Intl. IEEE Symp. on Requirements Engineering, San Diego, California, 1996, pp. 208-215.
20. J. Chomicki and J. Lobo, "Monitors for history-based policies," in Proceedings of the Second IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'01), London, UK, June 2001.
21. J. Park and R. Sandhu, "The ucon abc usage control model," ACM Transactions on Information and Systems Security, Feb 2004.
22. X. Zhang, J. Park, F. Parisi-Presicce, and R. Sandhu, "A logical specification for usage control," in Proceedings of the Symposium on Access Control Models and Technologies, New York, USA, 2004.
23. G. Edjlali, A. Acharya, and V. Chaudhary, "History-based access control for mobile code," in Proceedings of the 5th ACM Conference on Computer and Communications Security (CCS-5), San Francisco, USA., November 1998.
24. M. H. Kang, J. S. Park, and J. N. Froscher, "Access control mechanisms for inter-organizational workflow," in Proceedings of the sixth ACM Symposium on Access Control Models and Technologies, Chantilly, Virginia, USA, May 2001.
25. M. E. Zurko, R. Simon, and T. Sanfilippo, "A user-centered, modular authorization service built on an rbac foundation," in Proceedings of the 1999 IEEE Symposium, on Security and Privacy, Oakland, USA., 1999.
26. R. S. Sandhu, "Separation of duties in computerized information systems," in Proceedings of the IFIP Workshop on Database Security, 1990.
27. A. Arasu, B. Babcock, S. Babu, J. Cieslewicz, M. Datar, K. Ito, R. Motwani, U. Srivastava, and J. Widom, STREAM: The Stanford Data Stream Management System, 2004.
28. A. Arasu, S. Babu, and J. Widom, "The cql continuous query language: Semantic foundations and query execution," To appear in VLDB Journal, 2005.