Concurrent enforcement of usage control policies

Proceedings - 2008 IEEE Workshop on Policies for Distributed Systems and Networks, POLICY 2008

Volumn , Issue , 2008, Pages 111-118

  Janicke, Helge ^a   Cau, Antonio ^a   Siewe, François ^a   Zedan, Hussein ^a  

^a DE MONTFORT UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

STATIC ANALYSIS;

CONCURRENT ENVIRONMENT; DISTRIBUTED SYSTEMS; POLICY RULES; POLICY-BASED APPROACHES; USAGE CONTROL;

CONCURRENCY CONTROL;

EID: 51849135088     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2008.44     Document Type: Conference Paper

References (18)

1. J. Park and R. S. Sandhu, "The UCONABC usage control model." ACM Trans. Inf. Syst. Secur., vol. 7, no. 1, pp. 128-174, 2004.
2. D. Hard, "Statecharts: A visual formalism for complex systems," Sci. Comput. Program., vol. 8, no. 3, pp. 231-274, 1987. [Online]. Available: http://www.wisdom.weizmann.ac.il/~dharel/ SCANNED.PAPERS/Statecharts. pdf
3. A. Cau, B. Moszkowski, and H. Zedan, "The ITL homepage," http://www.cse.dmu.ac.uk/STRL/ITL.
4. X. Zhang, F. Parisi-Presicce, R. S. Sandhu, and J. Park, "Formal model, and policy specification of usage control." ACM Trans. Inf. Syst. Secur., vol. 8, no. 4, pp. 351-387, 2005.
5. D. Brewer and M. Nash, "The Chinese Wall Policy," in IEEE Symposium on Research in Security and Privacy. Oakland, California, USA: IEEE, May 1989, pp. 206-214.
6. J. Park, X. Zhang, and R. S. Sandhu, "Attribute Mutability in Usage Control," in Proceedings of IFIP TCIlAVG 11.3 Eighteenth Annual Conference on Data and Applications Security, C. Farkas and P. Samarati, Eds. Sitges, Catalonia, Spain: Kluwer, July 2004, pp. 15-29.
7. ISO/IEC, "ISO/IEC 10181-3:1996 Information technology - Open Systems Interconnection - Security frameworks for open systems: Access control framework," March 2006. [Online]. Available: http://www.iso. org/iso/en/CatalogueDetailPage.CatalogueDetail?CSNUMBER=18199
8. OASIS, "extensible Access Control Markup Language (XACML) Version 2.0," February 2005. [Online]. Available: http://www.oasis-open. org/co:mm.ittees/tc_home.php?wg_abbrev=xacrnl#XACML20
9. H. Janicke, A. Cau, F. Siewe, and H. Zedan, "A note on the formalisation of UCON," in Proceedings of the 11th ACM Symposium on Access Control Models and Technologies (SACMAT07), June 2007, pp. 163-168.
10. H. Janicke, A. Cau, F. Siewe, H. Zedan, and K. Jones, "A Compositional Event & Time-based Policy Model," in Proceedings of POLICY2006, London, Ontario, Canada. London, Ontario Canada: IEEE Computer Society, June 2006, pp. 173-182.
11. H. Janicke, A. Cau, F. Siewe, and H. Zedan, "Deriving Enforcement Mechanisms from Policies," in Proceedings of the 8th IEEE international Workshop on Policies for Distributed Systems (POLICY2007), June 2007, pp. 161-170.
12. E. C. Lupu and M. Sloman, "Conflicts in Policy-Based Distributed Systems Management," IEEE Trans. Softw. Eng., vol. 25, no. 6, pp. 852-869, 1999.
13. S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian, "Flexible support for multiple access control policies," ACM Trans. Database Syst., vol. 26, no. 2, pp. 214-260, 2001.
14. J. Chomicki and J. Lobo, "Monitors for History-Based Policies," in Proceedings of the International Workshop on Policies For Distributed Systems and Networks, ser. Lecture Notes In Computer Science, M. Sloman, J. Lobo, and E. Lupu, Eds., vol. 1995. Springer-Verlag, January 2001, pp. 57-72. [Online]. Available: http://www.cse.buffalo. edu/~chomi.cki/papers-policy01.ps
15. J. Lobo, R. Bhatia, and S. A. Naqvi, "A Policy Description Language," in AAAI/IAAI, 1999, pp. 291-298. [Online]. Available: http://citeseer.ist.psu.edu/lobo99policy.html
16. F. B. Schneider, "Enforceable Security Policies," ACM Transactions on Information and System Security, vol. 3, no. 1, pp. 30-50, February 2000.
17. C. N. Ribeiro, A. Zuquete, P. Ferreira, and P. Guedes, "Enforcing Obligations with Security Monitors," in The Third International Conference on Information and Communication Security (ICICS'2001), November 2001.
18. K. W. Hamlen, G. Morrisett, and F. B. Schneider, "Computability classes for enforcement mechanisms," ACM Trans. Program. Lang. Syst., vol. 28, no. 1, pp. 175-205, 2006.