Access-control policies via Belnap logic: Effective and efficient composition and analysis

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2008, Pages 163-176

  Bruns, Glenn ^a   Huth, Michael ^b  

^a LUCENT TECHNOLOGIES   (United States)

^b IMPERIAL COLLEGE LONDON   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

BOOLEAN FUNCTIONS; CHEMICAL ANALYSIS; COMPUTER NETWORKS; FORMAL LOGIC; FOUNDATIONS; KETONES; LINGUISTICS; MODEL CHECKING; SECURITY SYSTEMS; STATIC ANALYSIS;

COMBINATORS; COMPUTER SECURITY; CONTROL POLICIES; POLICY ANALYSIS;

QUERY LANGUAGES;

EID: 51749123140     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2008.10     Document Type: Conference Paper

References (25)

1. O. Arieli and A. Avron. The value of the four values. Artificial Intelligence, 102(1):97-141, 1998.
2. N. D. Belnap. A useful four-valued logic. In J. M. Dunn and G. Epstein, editors, Modern Uses of Multiple-Valued Logic, pages 8-37. D. Reidel, Dordrecht, 1977.
3. P. Bonatti, S. de Capitani di Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Transactions on Information and System Security, 5(1):1-35, 2002.
4. E. Börger, E. Grädel, and Y. Gurevich. The Classical Decision Problem. Springer Verlag Berlin, 1997.
5. G. Bruns, D. Dantas, and M. Huth. A simple and expressive semantic framework for policy composition in access control. In Proc. of the 2007 ACM workshop on Formal Methods in Security Engineering (FMSE '07), 2007.
6. R. E. Bryant. Graph-based algorithms for boolean function manipulation. IEEE Transactions on Computers, 35(8):677-691, 1986.
7. V. Capretta, B. Stepien, A. Felty, and S. Matwin. Formal correctness of conflict detection for firewalls. In Proc. of the 2007 ACM workshop on Formal Methods in Security Engineering (FMSE '07), pages 22-30, New York, NY, USA, 2007. ACM Press.
8. CiscoWorks. Using Management Center for Firewalls 1.3.2. Cisco Systems, Inc., 2004.
9. T. M. (editor). extensible Access Control Markup Language (XACML) Version 2.0. Committee specification, OASIS, February 2005.
10. D. Ferraiolo and D. R. Kuhn. Role-Based Access Control. In Proc. of the NIST-NSA National (USA) Computer Security Conference, pages 554-563, 1992.
11. D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli. Role-Based Access Control (Second Edition). Artech House, Inc., Norwood, MA, USA, 2003.
12. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In 27th International Conference on Software Engineering (ICSE 2005), pages 196-205, 2005.
13. M. Fitting. Bilattices are nice things. In T. Bolander, V. Hendricks, and S. A. Pedersen, editors, Self-Reference, pages 53-77. Center for the Study of Language and Information, 2006.
14. M. Ginsberg. Multivalued logics: a uniform approach to reasoning in AI. Computational Intelligence, 4:256-316, 1988.
15. J. Halpern and V. Weissman. Using first-order logic to reason about policies. In Proceedings of the Computer Security Foundations Workshop (CSFW'03), 2003.
16. S. C. Kleene. Introduction to Metamathematics. D. Van Nostrand, 1952.
17. R. S. Lazic. A Semantic Study of Data Independence with Applications to Model Checking. PhD thesis, Computing Laboratory, Oxford University, April 1999.
18. A. J. Lee, J. P. Boyer, L. E. Olson, and C. A. Gunter. Defeasible security policy composition for web services. In FMSE '06: Proceedings of the fourth ACM workshop on Formal methods in security, pages 45-54, New York, NY, USA, 2006. ACM Press.
19. M. McDougall, R. Alur, and C. A. Gunter. A model-based approach to integrating security policies for embedded devices. In Proceedings of Fourth ACM International Conference On Embedded Software (EMSOFT 2004), pages 211-219, 2004.
20. D. of Defense of the United States of America. Trusted computer system evaluation criteria. DoD Standard 5200.28-STD.
21. R. Reiter. A logic for default reasoning. Artif. Intell., 13(1-2):81-132, 1980.
22. C. Ribeiro, A. Zuquete, P. Ferreira, and P. Guedes. SPL: An access control language for security policies and complex constraints. In Proceedings of the Network and Distributed System Security Symposium (NDSS 2001), 2001.
23. A. W. Roscoe. Proving security protocols with model checkers by data independence techniques. In Proc. of the 11th IEEE Computer Security Foundations Workshop, pages 84-95, June 1998.
24. J. Sedayao. Cisco IOS Access Lists. O'Reilly, 2001.
25. T. Y. C. Woo and S. S. Lam. Authorizations in distributed systems: A new approach. Journal of Computer Security, 2(2-3):107-136, 1993.