Rewrite Based Specification of Access Control Policies

Electronic Notes in Theoretical Computer Science

Volumn 234, Issue C, 2009, Pages 37-54

  Cirstea, Horatiu ^a   Moreau, Pierre Etienne ^a   de Oliveira, Anderson Santana ^a  

^a UNIVERSITÉ DE LORRAINE   (France)

Author keywords

Access Control Policies; Information Flow; Model Checking; Term Rewriting

Indexed keywords

ACCESS CONTROL MECHANISMS; ACCESS CONTROL POLICIES; AUTHORIZED USERS; BASED SPECIFICATIONS; DATA PROTECTIONS; INFORMATION FLOW; INFORMATION LEAKAGES; POLICY SPECIFICATIONS; SECURITY LEVELS; TERM REWRITING;

MODEL CHECKING; SECURITY SYSTEMS; SPECIFICATIONS;

ACCESS CONTROL;

EID: 62849120146     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2009.02.071     Document Type: Article

References (16)

1. Balland E., Brauner P., Kopetz R., Moreau P.-E., and Reilles A. Tom: Piggybacking rewriting on java. Proceedings of the 18th Conference on Rewriting Techniques and Applications. Lecture Notes in Computer Science volume 4533 (2007), Springer-Verlag 36-47
2. D.E. Bell and L.J. LaPadula. Secure computer systems: Mathematical foundations. Technical Report Mitre Report ESD-TR-73-278 (Vol. I-III), Mitre Corporation, 1974
3. Elliot Bell D., and LaPadula L.J. Secure computer systems: A mathematical model, volume II. Journal of Computer Security 4 2/3 (1996) 229-263
4. Dougherty D.J., Fisler K., and Krishnamurthi S. Specifying and reasoning about dynamic access-control policies. In: Furbach U., and Shankar N. (Eds). IJCAR. Lecture Notes in Computer Science volume 4130 (2006), Springer 632-646
5. Guelev D.P., Ryan M., and Schobbens P.-Y. Model-checking access control policies. In: Zhang K., and Zheng Y. (Eds). ISC. Lecture Notes in Computer Science volume 3225 (2004), Springer 219-230
6. Heintze N., and Riecke J.G. The SLam calculus: Programming with secrecy and integrity. In: ACM (Ed). Conference record of POPL '98: the 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages. San Diego, California, 19-21 January 1998 (1998), ACM Press, New York, NY, USA 365-377
7. Jaume M., and Morisset C. A formal approach to implement access control. Journal of Information Assurance and Security 2 (2006) 137-148
8. McLean J. The algebra of security. Proc. IEEE Symposium on Security and Privacy (1988), IEEE Computer Society Press 2-7
9. Charles Morisset and Anderson Santana de Oliveira. Automated detection of information leakage in access control. In Monica Nesi and Ralf Treinen, editors, Second International Workshop on Security and Rewriting Techniques - SecReT 2007, Paris, France, 2007
10. Moreau P.-E., Ringeissen C., and Vittek M. A Pattern Matching Compiler for Multiple Target Languages. In: Hedin G. (Ed). 12th Conference on Compiler Construction. Warsaw, Poland. LNCS volume 2622 (May 2003), Springer-Verlag 61-76
11. Myers A.C. Jflow: Practical mostly-static information flow control. POPL '99: Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages (1999), ACM, New York, NY, USA 228-241
12. Naldurg P., Schwoon S., Rajamani S.K., and Lambert J. NETRA: seeing through access control. In: Winslett M., Gordon A.D., and Sands D. (Eds). FMSE (2006), ACM 55-66
13. Reilles A. Canonical abstract syntax trees. In: Denker G., and Talcott C. (Eds). Proceedings of WRLA 2006, Vienna, Austria. Electronic Notes in Theoretical Computer Science 176 (2006) 165-179
14. Sandhu R.S. Lattice-based access control models. IEEE Computer 26 11 (1993) 9-19
15. Sabelfeld A., and Myers A.C. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, special issue on Formal Methods for Security 21 1 (Jan 2003) 5-19
16. van den Brand M.G.J., Moreau P.-E., and Vinju J. Generator of efficient strongly typed abstract syntax trees in Java. IEE Proceedings - Software Engineering 152 2 (April 2005) 70-78