A rewriting framework for the composition of access control policies

PPDP'08 - Proceedings of the 10th International ACM SIGPLAN Symposium on Principles and Practice of Declarative Programming

Volumn , Issue , 2008, Pages 217-225

  Bertolissi, Clara ^a   Fernández, Maribel ^b  

^a AIX MARSEILLE UNIVERSITY   (France)

^b KING'S COLLEGE LONDON   (United Kingdom)

Author keywords

Access control; Distributed systems; Security policies; Term rewriting

Indexed keywords

COMPUTER HARDWARE DESCRIPTION LANGUAGES; COMPUTER PROGRAMMING; CONTROL SYSTEMS; FORMAL LANGUAGES; FORMAL LOGIC; PROGRAMMING THEORY; SECURITY SYSTEMS; XML;

ACCESS CONTROL POLICIES; CONTROL INFORMATIONS; DISTRIBUTED SYSTEMS; FIRST-ORDER LOGIC; FORMALISATION; GLOBAL POLICIES; POLICY COMBINATIONS; REWRITE SYSTEMS; SECURITY POLICIES; TERM REWRITING;

ACCESS CONTROL;

EID: 57549084474     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1389449.1389476     Document Type: Conference Paper

References (34)

1. F. Baader and T. Nipkow, Term rewriting and all that. Cambridge University Press, Great Britain, 1998.
2. S. van Bakel, F. Barbanera, and M. Fernández. Rewrite systems with abstraction and β-rule: Types, approximants and normalization. In Proc. of ESOP'96, volume 1058 of Lecture Notes in Computer Science. Springer, 1996.
3. S. van Bakel and M. Fernández. Normalization results for typeable rewrite systems. Inf. and Comp., 133(2):73-116, 1997.
4. C. Baral and M. Gelfond. Logic programming and knowledge representation. JLP, 19/20:73-148, 1994.
5. F. Barbanera and M. Fernández. Intersection type assignment systems with higher-order algebraic rewriting. Theoretical Computer Science, 170:173-207, 1996.
6. H. P. Barendregt. The Lambda Calculus: Its Syntax and Semantics. North-Holland, revised edition, 1984.
7. S. Barker and M. Fernández. Term rewriting for access control. In Proc. of IFIP WG 11.3, DBSec'2006, France, volume 4127 of Lecture Notes in Computer Science. Springer-Verlag, 2006.
8. S. Barker and P. Stuckey. Flexible access control policy specification with constraint logic programming. ACM Trans, on Information and System Security, 6(4):501-546, 2003.
9. G. Barthe, G. Dufay, M. Huisman, and S. Melo de Sousa. Jakarta: a toolset to reason about the JavaCard platform. In Proc. of e-SMART'01, volume 2140 of Lecture Notes in Computer Science. Springer-Verlag, 2002.
10. E. Bertino, B. Catania, E. Ferrari, and P. Perlasca. A logical framework for reasoning about access control models. In Proc. of SACMAT '01, pages 41-52. ACM, 2001.
11. C. Bertolissi, M. Fernández, and S. Barker. Dynamic event-based access control as term rewriting. In Proc. of IF IP WG 11.3, DB-SEC'07, CA, USA, volume 4602 of Lecture Notes in Computer Science. Springer-Verlag, 2007.
12. F. Blanqui, J-P. Jouannaud, and M. Okada. Inductive data type systems. Theoretical Computer Science, 272(l-2):41-68, 2002.
13. P. Bonatti, S. De Capitani di Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Trans, on Information and System Security, 5(1): 1-35, February 2002.
14. V. Breazu-Tannen and J. Gallier. Polymorphic rewriting conserves algebraic strong normalization. Theoretical Computer Science, 83(1), 1991.
15. V. Breazu-Tannen and J. Gallier. Polymorphic rewriting conserves algebraic confluence. Inform, and Comput., 82:3-28, 1992.
16. M. Clavel, F. Durán, S. Eker, P. Lincoln, N. Martí-Oliet, J. Meseguer, and C. Talcott. The Maude 2.0 system. In Proc. of RTA '03, number 2706 in Lecture Notes in Computer Science, pages 76-87. Springer-Verlag, 2003.
17. M. Coppo and M. Dezani-Ciancaglini. An extension of the basic functionality theory for the λ-calculus. Notre Dame Journal of Formal Logic, 21(4):685-693, 1980.
18. S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Access control: principles and solutions. Softw., Pract. Exper., 33(5):397-421, 2003.
19. D. J. Dougherty. Adding algebraic rewriting to the untyped lambda calculus. In Proc. of RTA'9l, volume 488 of Lecture Notes in Computer Science, Como, Italy, 1991.
20. D. J. Dougherty, Kathi Fisler, and Shriram Krishnamurthi. Specifying and reasoning about dynamic access-control policies. In Proc. of IJCAR '06, volume 4130 of Lecture Notes in Computer Science, pages 632-646. Springer, 2006.
21. D.J. Dougherty, C. Kirchner, H. Kirchner, and A. Santana de Oliveira. Modular access control via strategic rewriting. In Proc. of ESORICS'07, Lecture Notes in Computer Science, pages 578-593. 2007.
22. R. Echahed and F. Prost. Security policy in a declarative style. In Proc. of PPDP'05. ACM Press, 2005.
23. P. Hudak, J. Peterson, and J. Fasel. A gentle introduction to Haskell 98. http://www.haskell.org/tutorial/, 1999.
24. S. Jajodia, P. Samarati, M. Sapino, and VS. Subrahmaninan. Flexible support for multiple access control policies. ACM TODS, 26(2):214- 260, 2001.
25. J.-W. Klop, V. van Oostrom, and F. van Raamsdonk, Combinatory reduction systems, introduction and survey. Theoretical Computer Science, 121:279-308, 1993.
26. B. W. Lampson. Protection. SIGOPS Open Syst. Rev., 8(l):18-24, 1974.
27. F. Müller. Confluence of the lambda calculus with left-linear algebraic rewriting. Inform. Processing Letters, 41 (6):293-299, 1992.
28. OASIS, extensible access control markup language (xacml), 2003. www.oasis-open.org/xacml/docs/.
29. D. Sannella S. Kahrs and A. Tarlecki. The definition of Extended ML: A gentle introduction. Theoretical Computer Science, 173(2):445-484, 1997.
30. R. Sandhu, D. Ferraiolo, and R. Kuhn. The NIST model for role-based access control: Towards a unified standard. In Proc. 4th ACM Workshop on Role-Based Access Control, pages 47-61, 2000.
31. A. Santana de Oliveira. Rewriting-based access control policies. In Proc. of SECRET'06, Venice, Italy, ENTCS. Elsevier, 2007.
32. A. Santana de Oliveira. Rewriting and modularity of security policies. PhD Thesis, University Henri Poincaré, Nancy, 2008.
33. TOM. A software environment for defining transformations in Java. http://tom.loria.fr/soft/release-2.6/manual-2.6
34. D. Wijesekera and S. Jajodia. A prepositional policy algebra for access control. ACM Trans. Inf. Syst. Secur., 6(2):286-325, 2003.