A logical specification for usage control

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn 9, Issue , 2004, Pages 1-10

  Zhang, Xinwen ^a   Park, Jaehong ^a   Parisi Presicce, Francesco ^a   Sandhu, Ravi ^a  

^a GEORGE MASON UNIVERSITY   (United States)

Author keywords

Access control; Logic specification; Security policy; Usage control

Indexed keywords

COMPUTER OPERATING SYSTEMS; CUSTOMER SATISFACTION; DATABASE SYSTEMS; DECISION MAKING; FORMAL LOGIC; MARKETING; MATHEMATICAL MODELS; NETWORK PROTOCOLS; ONLINE SYSTEMS; PUBLIC POLICY;

ACCESS CONTROL; LOGIC SPECIFICATION; SECURITY POLICY; USAGE CONTROL;

SECURITY OF DATA;

EID: 4143074723     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/990036.990038     Document Type: Conference Paper

References (22)

1. D. E. Bell and L. J. Lapadula, Secure Computer Systems: Mathematical Foundations and Model. Mitre Corp. Report No.M74-244, Bedford, Mass.
2. E. Bertino, C. Bettini, and P. Samarati, A Temporal Authorization Model, In Proc. of ACM Computer and Communication Security, 1994.
3. E. Bertino, C. Bettini, E. Ferrari, and P.Samarati, A Temporal Access Control Mechanism for Database Systems, IEEE Transactions on Knowledge and Data Engineering, Vol.8, No.1, Feburary 1996.
4. E. Bertino, C. Bettini, E. Ferrari, and P. Samarati, An Access Control Model Supporting Periodicity Constraints and Temporal Reasoning, ACM Transaction on Database Systems, Vol.23, No.3, September 1998.
5. E. Bertino, B. Catania, E. Ferrari, and P. Perlasca, A Logical Framework for Reasoning about Access Control Models, In Proc. of Sixth ACM Symposium on Access Control Models and Technologies, 2001.
6. C. Bettini, S. Jajodia, X. Sean Wang, and D. Wijesekera, Obligation Monitoring in Policy Management, 3rd Internationl Workshop on Policies for Distributed Systems and Networks, 2002.
7. C. Bettini, S. Jajodia, X. Sean Wang, and D. Wijesekera, Provisions and Obligations in Policy Management and Security Applications, In proc. of the 28th VLDB Conference, Hong Kong, China, 2002.
8. D. Brewer and M. Nash, The Chinese Wall Security Policy, IEEE Symposium On Research in Security and Privacy, Oakland, California, 1988.
9. J. Chomicki and J. Lobo, Monitors for History-Based Policies, 2nd Internationl Workshop on Policies for Distributed Systems and Networks, 2001.
10. N. Damianou, N. Dulay, E. Lupu, and M. Sloman, The Ponder Policy Specification Language, In Proc. of the Workshop on Policies for Distributed System s and Networks, 2001.
11. A. Gal and V. Atluri, An Authorization Model for Temporal Data, In Proc. of ACM Computer and Communication Security, 2000.
12. M. Hansen and R. Sharp, Using Interval Logics for Temporal Analysis of Security Protocols, In Proc. of the ACM Workshop on Formal Methods in Security Engineering, 2003.
13. S. Jajodia, P. Samarati, and V. S. Subrahmanian, A Logical Language for Expressing Authorizations, IEEE Symposium On Research in Security and Privacy, Oakland, California, 1997.
14. S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian, Flexible Support for Multiple Access Control Policies, ACM Transactions on Database Systems, June, 2001.
15. Leslie Lamport, The Temporal Logic of Actions, ACM Transactions on Programming Languages and Systems (TOPLAS), Vol. 16 Issue 3, May 1994 (also available from http://research.microsoft.com/users/lamport/tla/papers.html).
16. Leslie Lamport, Specifying Systems, The TLA+ Language and Tools for Hardware and Software Engineers, Addison-Wesley, 2003.
17. Zohar Manna and Amir Pnueli, The Temporal Logic of Reactive and Concurrent Systems Specification, Springer-Verlag, 1991.
18. R. Sandhu and J. Park, Usage Control: A Vision for Next Generation Access Control, The Second International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security, 2003.
19. ABC Usage Control Model, ACM Transactions on Information and Systems Security, Feb., 2004.
20. R. Sandhu, Lattice-Based Access Control Models, IEEE Computer, Vol.26, No.11, November 1993.
21. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman, Role Based Access Control Models, IEEE Computer, 29, (2), pp.38-47, 1996
22. F. Siewe, A. Cau, and H. Zedan, Compositional Framework for Access Control Policies Enforcement, In Proc. of the ACM Workshop on Formal Methods in Security Engineering, 2003.