Deriving enforcement mechanisms from policies

Proceedings - Eighth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2007

Volumn , Issue , 2007, Pages 161-170

  Janicke, Helge ^a   Cau, Antonio ^a   Siewe, François ^a   Zedan, Hussein ^a  

^a DE MONTFORT UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; DISTRIBUTED COMPUTER SYSTEMS; SECURITY OF DATA;

ENFORCEMENT CODE; POLICY LANGUAGES; POLICY-MANAGED SYSTEMS;

PUBLIC POLICY;

EID: 34748838372     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2007.15     Document Type: Conference Paper

References (26)

1. M. Sloman, "Policy driven management for distributed systems," Journal of Network and Systems Management, vol. 2, pp. 333-360, 1994. [Online], Available: citeseer.ist.psu.edu/sloman94policy.html
2. ISO/IEC, "ISO/IEC 10181-3:1996 Information technology - Open Systems Interconnection - Security frameworks for open systems: Access control framework," March 2006. [Online]. Available: http://www.iso. org/iso/en/CatalogueDetailPage.CatalogueDetail?CSNUMBER=18199
3. M. Abadi, "Logic in Access Control," in Proceedings of the 18th Annual Symposium on Logic in Computer Science (LICS'03), vol. 15. Ottawa, Canada: IEEE Computer Society Press, June 2003, pp. 228-233. [Online]. Available: citeseer.ist.psu.edu/article/abadi031ogic.html
4. M. Y. Becker, C. Fournet, and A. D. Gordon, "SecPAL: Design and Semantics of a Decentralized Authorisation Language," Microsoft Research, Roger Needham Building 7 J.J. Thompson Avenue, Cambridge, CB3 0FB, UK, Tech. Rep., September 2006.
5. H. Garcia-Molina, J. D. Ullman, and J. Widom, Database Systems: The Complete Book. New Jersey: Prentice Hall, 2002.
6. M. Abadi and C. Fournet, "Access control based on execution history," in 10th Annual Network and Distributed System Symposium (NDSS'03)., February 2003. [Online]. Available: citeseer.ist.psu.edu/ abadi03access.html
7. H. T. Janicke, "The Development of Secure Multi-Agent Systems," Ph.D. dissertation, De Montfort University, February 2007.
8. H. Janicke, A. Cau, F. Siewe, H. Zedan, and K. Jones, "A Compositional Event & Time-based Policy Model," in Proceedings of POLICY2006, London, Ontario, Canada. IEEE, 2006.
9. F. Siewe, "A Compositional Framework for the Development of Secure Access Control Systems," Ph.D. dissertation, Software Technology Research Laboratory, Department of Computer Science and Engineering, De Montfort University, Leicester, 2005.
10. B. Moszkowski, "Compositional Reasoning about Projected and Infinite Time," in Proceedings of the 1st IEEE International Conference on Engineering of Complex Computer Systems (ICECCS'95), 1995.
11. L. Gong, G. Ellison, and M. Dageforde, Inside Java 2 Platform Security: Architecture, API Design and Implementation, 2nd ed. Addison-Wesley Professional, 2003, iSBN: 0201787911.
12. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman, "RoleBased Access Control Models," IEEE Computer, vol. 29, no. 2, pp. 38-47, 1996.
13. L. J. LaPadula and D. E. Bell, "Secure Computer Systems: Mathematical Foundations," MITRE Technical Report 2547, Tech. Rep., 1973.
14. J. Park, X. Zhang, and R. S. Sandhu, "Attribute mutability in usage control." in DBSec, C. Farkas and P. Samarati, Eds. Kluwer, 2004, pp. 15-29.
15. ABC usage control model," in Proceeding of the Second International Workshop on Mathematical Method, Models and Architectures for Computer Networks Security, 2003.
16. A. K. Bandara, E. C. Lupu, and M. Sloman, Handbook of Network and System Administration. Elsevier, to appear in 2007, ch. Policy Based Management.
17. D. Brewer and M. Nash, "The Chinese Wall Policy," in IEEE Symposium on Research in Security and Privacy, May 1989, pp. 206-214.
18. P. Gamma, C. Ribero, and P. Ferreira, "A Scalable History-based Policy Engine," in Proceedings of the 7th International Workshop on Policies for Distributed Systems and Networks, 2006.
19. C. N. Ribeiro, A. Zuquete, P. Ferreira, and P. Guedes, "SPL: An access control language for security policies with complex constraints," in Network and Distributed System Security Symposium (NDSS'01), February 2001.
20. S. Calo and J. Lobo, "A Basis for Comparing Characteristics of Policy Systems," in Seventh IEEE International Workshop on Policies for Distributed Systems and Networks POLICY2006, London, Ontario, Canada, June 2006, pp. 183-192.
21. T. Mossakowski, M. Drouineaud, and K. Sohr, "A temporal-logic extension of role-based access control covering dynamic separation of duties," in time-ictl, 10th International Symposium on Temporal Representation and Reasoning and Fourth International Conference on Temporal Logic, vol. 1, 2003, p. 83.
22. X. Zhang, F. Rarisi-Presicce, J. Park, and R. Sandhu, "Formal Model and Policy Specification of Usage Control," ACM Transactions on Information and System Security, 2005.
23. L. Lamport, "The temporal logic of actions," ACM Trans. Program. Lang. Syst., vol. 16, no. 3, pp. 872-923, 1994.
24. J. Chomicki, "Efficient checking of temporal integrity constraints using bounded history encoding," ACM Trans. Database Syst., vol. 20, no. 2, pp. 149-186, 1995.
25. F. B. Schneider, "Enforceable Security Policies," ACM Transactions on Information and System Security, vol. 3, no. 1, pp. 30-50, February 2000.
26. J. Ligatti, L. Bauer, and D. Walker, "Edit automata: enforcement mechanisms for run-time security policies," International Journal of Information Security, 2005.