DKAL: Distributed-knowledge authorization language

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2008, Pages 149-162

  Gurevich, Yuri ^a   Neeman, Itay ^b  

^a MICROSOFT RESEARCH   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SECURITY; DISTRIBUTED SYSTEMS; FIXED-POINT LOGICS; LIABILITY PROTECTION; NOVEL INFORMATION; QUERY ALGORITHMS;

CHLORINE COMPOUNDS; COMPUTATIONAL COMPLEXITY; FOUNDATIONS; INFORMATION THEORY; LINGUISTICS; SECURITY SYSTEMS;

QUERY LANGUAGES;

EID: 51949113625     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2008.8     Document Type: Conference Paper

References (29)

1. Martín Abadi, Michael Burrows, Butler Lampson, and Gordon Plotkin, "A Calculus for Access Control in Distributed Systems," ACM Transactions on Programming Languages and Systems, 15:4, 706-734, 1993.
2. Martin Abadi and Boon Thau Loo, "Towards a Declarative Language and System for Secure Networking", in International Workshop on Networking Meets Databases (NetDB '07), 2007.
3. Private communication, January 2008.
4. Moritz Y. Becker, Cédric Fournet and Andrew D. Gordon, "SecPAL: Design and Semantics of a Decentralized Authorization Language", Technical Report MSR-TR-2006-120, Microsoft Research, September 2006.
5. Moritz Y. Becker, Cédric Fournet and Andrew D. Gordon, "SecPAL: Design and Semantics of a Decetralized Authorization Language", 20th IEEE Computer Security Foundations Symposium (CSF), 3-15, 2007.
6. Moritz Y Becker and Peter Sewell, "Cassandra: Distributed Access Control Policies with Tunable Expressiveness", in IEEE 5th International Workshop on Policies for Distributed Systems and Networks, 159-168, 2004.
7. Moritz Y. Becker and Peter Sewell, "Cassandra: Flexible Trust Management, Applied to Electronic Health Records", in IEEE Computer Security Foundations Workshop, 139-154, 2004.
8. Andreas Blass and Yuri Gurevich, "Existential Fixed-Point Logic", Springer Lecture Notes in Computer Science 270 (1987), 20-36. Available at http://research.microsoft.com/~gurevich/Opera/73.pdf.
9. Matt Blaze, and Joan Feigenbaum, and Jack Lacy, "Decentralized Trust Management", in Proc. 1996 IEEE Symposium on Security and Privacy, 164-173, 1996.
10. Matt Blaze, Joan Feigenbaum, Angelos D. Keromytis, "The Role of Trust Management in Distributed Systems Security", in Secure Internet Programming, 185-210, 1999.
11. S. Cantor, J. Kemp, R. Philpott, and E. Maler, "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard saml-core-2.0-os, March 2005. http: //docs.oasis-open.org/ security/saml/v2.0/saml-core-2.0-os.pdf.
12. John DeTreville, "Binder, a Logic-Based Security Language", in IEEE Symposium on Security and Privacy, 105-113, 2002.
13. Blair Dillaway, "A Unified Approach to Trust, Delegation, and Authorization in Large-Scale Grids," Technical Paper, Microsoft Corporation, September 2006.
14. Herbert Enderton, "A Mathematical Introduction to Logic", 2nd edition, Academic Press.
15. Yuri Gurevich and Itay Neeman, "DKAL: Distributed Knowledge Authorization Language", MSR-TR-2007-116 (August 2007) and MSR-TR-2008-09 (January 2008 Revision), Microsoft Research.
16. Wilfrid Hodges, "Model Theory", Cambridge University Press, 1993.
17. Joxan Jaffar and Michael J. Maher, "Constraint logic programming: A survey," Journal of Logic Programming 19/20 (1994), 503-580.
18. Ninghui Li, "Delegation Logic: A Logic-Based Approach to Distributed Authorization", Ph.D. thesis, New York University, September 2000.
19. Ninghui Li, Benjamin N. Grosof and Joan Feigenbaum, "Delegation Logic: A Logic-Based Approach to Distributed Authorization", ACM Trans. on Information and System Security (TISSEC) 6:1 (February 2003), 128-171.
20. Ninghui Li and John C. Mitchell, "Datalog with Constraints: A Foundation for Trust Management Languages", PADL 2003, V. Dahl and P. Wadler (Eds.), LNCS 2562, 58-73, 2003.
21. Ninghui Li and John C. Mitchell, "RT: A Role-Based Trust-Management Framework", in Proceedings of the Third DARPA Information Survivability Conference and Exposition (DISCEX III), 201-212, April 2003.
22. Ninghui Li, William H. Winsborough, and John C. Mitchell, "Beyond Proof-of-Compliance: Safety and Availability Analysis in Trust Management", in Proceedings of 2003 IEEE Symposium on Security and Privacy, 123-139, May 2003.
23. B.T. Loo, T. Condie, M. Garofalakis, D.E. Gay, J.M. Hellerstein, P. Maniatis, R. Ramakrishnan, T. Roscoe, and I. Stoica, "Declarative Networking: Language, Execution and Optimization." In Proceedings of ACM SIGMOD International Conference on Management of Data (June 2006).
24. Yuri Matiyasevich, Hubert's Tenth Problem, MIT Press, 1993.
25. Elliott Mendelson, "Introduction to Mathematical Logic," 4th edition, Academic Press.
26. "Prolog," Wikipedia. http://en.wikipedia.org/wiki/Prolog.
27. OASIS. Security Assertion Markup Language (SAML). www.oasis-open.org/.
28. Oxford English Dictionary, 2nd edition, Oxford University Press, 1989.
29. Alfred Tarski, "A Lattice-Theoretical Fixpoint Theorem and its Applications", Pacific Journal of Mathematics 5:2 (1955), 285-309.