Defeasible security policy composition for web services

Proceedings of the Fourth ACM Workshop on Formal Methods in Security Engineering, FMSE'06. A workshop held in conjuction with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 45-54

  Lee, Adam J ^a   Boyer, Jodie P ^a   Olson, Lars E ^a   Gunter, Carl A ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Defeasible logic; Security policy composition; Web services

Indexed keywords

DEFEASIBLE LOGIC; POLICY COMPOSITION; SECURITY POLICY COMPOSITION;

COMPUTER CONTROL SYSTEMS; LOGIC PROGRAMMING; PUBLIC POLICY; SECURITY SYSTEMS; WEB SERVICES;

SECURITY OF DATA;

EID: 34547271784     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180337.1180342     Document Type: Article

References (37)

1. E. S. Al Shaer and H. H. Hamend. Discovery of policy anomalies in distributed firewalls. In IEEE INFOCOMM, 2004.
2. Amazon web services. Web Page, Jan. 2006. www.amazon.com/gp/aws/landing. html.
3. G. Antoniou, D. Billington, and M. J. Maher. On the analysis of regulations using defeasible rules. In HICSS '99: Proceedings of the Thirty-second Annual Hawaii International Conference on System Sciences-Volume 6, page 6033, 1999.
4. G. Antoniou and A. Ghose. What is default reasoning good for? applications revisited. In 32nd Hawaii International Conference on System Sciences, Jan. 1999.
5. G. Antoniou, M. J. Maher, and D. Billington. Defeasible logic versus logic programming without negation as failure. Journal of Logic Programming, 42(1):47-57, 2000.
6. S. Batres and C. Ferris (Editors). Web services reliable messaging policy assertion(WS-RM Policy). Specification, Feb. 2005. msdn.microsoft.com/library/ en-us/dnglobspec/html/WS-RMPolicy.pdf.
7. E. Bertino, S. Jajodia, and P. Samarati. Supporting multiple access control policies in database systems. In IEEE Symposium on Security and Privacy, pages 94-109, 1996.
8. K. Bhargavan, C. Fournet, and A. D. Gordon. Verifying policy-based security for web services. In 11th ACM conference, on Computer and Communications Security, pages 268-277, Oct. 2004.
9. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In Computer Security Foundations Workshop (CSFW 06), Venice, Italy, July 2006. IEEE.
10. C. Bidan and V. Issarny. Dealing with multi-policy security in large open distributed systems. In European Symposium on Research in Computer Security (ESORICS), pages 51-66, 1998.
11. P. Bonatti, S. D. C. di Vimercati, and P. Samarati. A modular approach to composing access control policies. In 7th ACM Conference on Computer and Communications Security (CCS '00), pages 164-173, Nov. 2000.
12. L. Cholvy and F. Cuppens. Analyzing consistency of security policies. In 18th IEEE Computer Society Symposium on Research in Security and Privacy, 1997.
13. D. Eastlake and J. Reagle (Chairs). W3C XML-DSig working group. Web Page, Jan. 2006. www.w3.org/Signature/.
14. C. Ferris and D. Langworth (Editors). Web services reliable messaging protocol(WS-ReliableMessaging). Specification, Feb. 2005. msdn.microsoft.com/ library/en-us/dnglobspec/html/WS-ReliableMessaging.pdf.
15. I. Foster, C. Kesselman, J. M. Nick, and S. Tuecke. The physiology of the grid: An open grid services architecture for distributed systems integration. In Open Grid Service Infrastructure Working Group, Global Grid Forum, Jun. 2002.
16. K. Frankish. Non-monotonic inference. In The Encyclopedia of Language and Linguistics. Elsevier, second edition, 2005.
17. Google web APIs. Web Page, Jan. 2006. www.google.com/apis/.
18. G. Governatori, A. H. M. ter Hofstede, and P. Oaks. Defeasible logic for automated negotiation. In P. Swatman and P. M. Swatman, editors, Proceedings of CoIlECTeR, 2000.
19. G. Governatori, A. H. M. ter Hofstede, and P. Oaks. Is defeasible logic applicable? In G. Antoniou and G. Governatori, editors, Proceedings of the 2nd Australasian Workshop on Computational Logic, pages 47-62, Brisbane, January 2001. Queensland University of Technology.
20. B. N. Grosof, Y. Labrou, and H. Y. Chan. A declarative approach to business rules in contracts: courteous logic programs in XML. In ACM Conference on Electronic Commerce, pages 68-77, 1999.
21. J. Holpern and V. Weissman. Using first-order logic to reason about policies. In IEEE Computer Security Foundations Workshop (CSFW'03), Jun. 2003.
22. S. Horrell. Web services enhancements 2.0 support for WS-Policy. Web Page, July 2004. msdn.microsoft.com/library/en-us/dnwse/html/wse2wspolicy.asp.
23. C. Kaler and A. Nadalin (Editors). Web services federation language (WS-Federation). Specification, Jul. 2003. www-106.ibm.com/developerworks/ webservices/library/ws-fed/.
24. E. C. Lupu and M. Sloman. Conflicts in policy-based distributed systems management. IEEE Transactions on Software Engineering, 25(6):852-869, 1999.
25. K. D. Lux, M. J. May, N. L. Bhattad, and C. A. Gunter. WSEmail: Secure internet messaging based on web services. In International Conference on Web Services, Orlando, FL, July 2005.
26. M. J. Maher. Propositional defeasible logic has linear complexity. Theory and Practice of Logic Programming, 1(6):691-711, 2001.
27. M. J. May, W. Shin, C. A. Gunter, and I. Lee. Securing the drop-box architecture for assisted living. In Formal Methods in Software Engineering (FMSE '06), Alexandria, VA, November 2006. ACM.
28. M. McDougall, R. Alur, and C. A. Gunter. A model-based approach to integrating security policies for embedded devices. In ACM EMSOFT, Sept. 2004.
29. Michael McDougall. Modeling and Analyzing Integrated Policies. PhD thesis, University of Pennsylvania, 2004.
30. A. Nadalin (Editor). Web services security policy language (WS-SecurityPolicy). Web Services Specification, 2002. www.verisign.com/wss/WS- SecurityPolicy.pdf.
31. D. Nute. Defeasible logic. In 14th International Conference on Applications of Prolog, Oct. 2001.
32. J. Reagle (Chair). W3C XML encryption working group. Web Page, Jan. 2006. www.w3.org/Encryption/2001/.
33. D. M. Reeves, M. P. Wellman, B. N. Grosof, and H. Y Chan. Automated negotiation from declarative contract descriptions. In 17th National Conference on Artificial Intelligence, Workshop on Knowledge-Based Electronic Markets (KBEM), Jul. 2000.
34. A. Rock. Deimos: A query answering defeasible logic system. Technical report, Griffith University, Mar. 2004. www.cit.gu.edu.au/~arock/defeasible/doc/ Deimos-long.pdf.
35. J. Schlimmer (Editor). Web services policy framework (WS-Policy). Web Services Specification, 2004. ftp://www6.software.ibm.com/software/developer/ library/ws-policy.pdf.
36. C. Sharp (Editor). Web services policy attachment (WS-PolicyAttachment). Specification, Sept. 2004. msdn.microsoft.com/library/en-us/dnglobspec/html/ws- policyattachment.asp.
37. SOAP version 1.2. W3C Recommendation, Jan. 2006. www.w3.org/TR/soap12.