Analysis of dynamic policies

Information and Computation

Volumn 206, Issue 2-4, 2008, Pages 185-212

  Sistla, A Prasad ^a   Zhou, Min ^a  

^a 1120 Science and Engineering Offices   (United States)

Author keywords

Dynamic access control policies; First order CTL; Role containment; Security properties; Tree automata; Trust Management Systems

Indexed keywords

AUTOMATA THEORY; LOGIC PROGRAMMING; MATHEMATICAL MODELS; SPECIFICATIONS; TREES (MATHEMATICS);

DYNAMIC ACCESS CONTROL POLICIES; SECURITY PROPERTIES; TREE AUTOMATA; TRUST MANAGEMENT SYSTEMS;

FORMAL LANGUAGES;

EID: 40149096827     PISSN: 08905401     EISSN: 10902651     Source Type: Journal    
DOI: 10.1016/j.ic.2007.05.006     Document Type: Article

References (26)

1. M. Abadi, On SDSI's linked local name spaces, in: PCSFW: Proceedings of the 10th Computer Security Foundations Workshop, IEEE Computer Society Press, 1997.
2. Alur R., and Dill D. A theory of timed automata. Theoretical Computer Science 122 2 (1994) 183-235
3. Bertino E., Bettinit C., Ferrari E., and Samarati P. An access control model supporting periodicity constraints and temporal reasoning. ACM Transactions on Database Systems 23 3 (1998) 213-285
4. M. Blaze, J. Feigenbaum, J. Ioannidis, A.D. Keromytis, The role of trust management in distributed systems security, 1999, pp. 185-210.
5. M. Blaze, J. Feigenbaum, K. Keromytis, KeyNote: trust management for public-key infrastructures, in: B. Christianson, B. Crispo, W.S. Harbison, M. Roe (Eds.), Security Protocols-6th International Workshop, Lecture Notes in Computer Science, vol. 1550, Cambridge, United Kingdom, Springer-Verlag, Berlin Germany, 1999, pp 59-66.
6. D.F.C. Brower, M.J. Nash, The chinese wall security policy, in: IEEE Symposium on Security and Privacy, Oakland, California, May 1989, pp. 206-214.
7. D.R. Clark, D.R. Wilson, A comparison of commercial and millitary security policies, in: IEEE Symposium on Security and Privacy, Oakland, California, 1987.
8. Clarke D., Elien J.-E., Ellison C., Fredette M., Morcos A., and Rivest R. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security 9 4 (2001)
9. E.M. Clarke, E.A. Emerson, Design and synthesis of synchronization skeletons using branching time temporal logic, in: Proceedings of Workshop on Logics of Programs-Springer-Verlag LNCS, vol. 131, Springer-Verlag, Yorktown Heights, NY, 1981, pp. 52-71.
10. Clarke E.M., Emerson E.A., and Sistla A.P. Automatic verification of finite-state concurrent systems using temporal logic specifications. ACM Transactions On Programming Languages And Systems 8 2 (1986) 224-263
11. Chandra A.K., Kozen D.C., and Stockmeyer L.J. Alternation. Journal of the Association for Computing Machinery 28 1 (1981) 114-133
12. C.M.Ellision, B. Frantz, B. Lampson, R.L. Rivest, B.M. Thomas, T. Ylonen, Spki certificate theory, in: RFC 2693, 1999.
13. A.K. Eamani, A.P. Sistla, Language based policy analysis in trust management systems, in: Proceedings of the Fourth PKI Conference, 2005.
14. C.M. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Ylonen, RFC 2693: SPKI Certificate Theory, The Internet Society, 1999, Available from: .
15. J. Halpern, V. Weizman, Using first order logic to reason about policies, in: Proceedings of the 16th IEEE Computer Security Foundations Workshop, IEEE Computer Society Press, 2003.
16. Halpern J.Y., and van der Meyden R. A logic for sdsi's linked local name spaces. Journal of Computer Security 9 (2001) 105-142
17. Jajodia S., Samarati P., Sapino M.L., and Subramanian V.S. Flexible support for multiple access control policies. ACM Transactions on Database Systems 26 2 (2001) 214-247
18. S. Jha, T. Reps, Analysis of spki/sdsi certificates using model checking, in: 15th IEEE Computer Security Foundations Workshop, IEEE Computer Society Press, Cape Breton, Canada, 24-26, 2001, pp. 129-144.
19. N. Li, Local names in SPKI/SDSI, in: Proceedings of the 13th IEEE Computer Security Foundations Workshop, IEEE Computer Society Press, 2000, pp. 2-15.
20. Li N., Mitchell J., and Winsborough W.H. Beyond Proof-of-Compliance: Safety and availability analysis in trust management. Journal of the ACM 52 3 (2005)
21. N. Li, J.C. Mitchell, Datalog with constraints: a foundation for trust management languages, in: Proceedings of the Fifth International Symposium on Practical Aspects of Declarative Languages, 2003.
22. N. Li, J.C. Mitchell, W.H. Winsborough, Design of a role-based trust-management framework, in: SP '02: Proceedings of the 2002 IEEE Symposium on Security and Privacy, IEEE Computer Society, 2002, p. 114.
23. N. Li, W.H. Winsborough, J.C. Mitchell, Beyond proof-of-compliance: safety and availability analysis in trust management, in: SP '03: Proceedings of the 2003 IEEE Symposium on Security and Privacy, IEEE Computer Society, Washington, DC, USA, 2003, pp. 123.
24. Manna Z., and Pnueli A. The Temporal Logic of Reactive and Concurrent Systems: Specification (1991), Springer-Verlag, Berlin
25. A. Sasterkar, P. Yang, S.D. Stroller, C.R. Ramakrishnan, Policy analysis for administrative role based access control, in: CSFW 2006: Proceedings of the Computer Security Foundation Workshop, Venice, Italy, 2006.
26. Seidl H. Deciding equivalence of finite tree automata. SIAM Journal of Computing 19 3 (1990) 424-437