Towards an efficient and language-agnostic compliance checker for trust negotiation systems

Proceedings of the 2008 ACM Symposium on Information, Computer and Communications Security, ASIACCS '08

Volumn , Issue , 2008, Pages 228-239

  Lee, Adam J ^a   Winslett, Marianne ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Compliance checker; Policy; Satisfying sets; Trust negotiation

Indexed keywords

AUTHORIZATION POLICY; AVERAGE SIZE; PATTERN-MATCHING ALGORITHM; SEARCH SPACES; TRUST NEGOTIATIONS;

SECURITY OF DATA;

EID: 70449612716     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1368310.1368343     Document Type: Conference Paper

References (28)

1. L. Bauer, S. Garriss, and M. K. Reiter. Distributed proving in access-control systems. In Proceedings of the IEEE Symposium on Security and Privacy, pages 81-95, May 2005.
2. M. Y. Becker. A formal security policy for an NHS electronic health record service. Technical Report UCAM-CL-TR-628, University of Cambridge Computer Laboratory, Mar. 2005.
3. M. Y. Becker and P. Sewell. Cassandra: Distributed access control policies with tunable expressiveness. In Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, pages 159-168, June 2004.
4. E. Bertino, E. Ferrari, and A. C. Squicciarini. X-TNL: An XML-based language for trust negotiations. In Proceedings of the Fourth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY), pages 81-84, June 2003.
5. E. Bertino, E. Ferrari, and A. C. Squicciarini. Trust-X: A peer-to-peer framework for trust establishment. IEEE Transactions on Knowledge and Data Engineering, 16 (7):827-842, July 2004.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The KeyNote trust management system version 2. IETF RFC 2704, Sept. 1999.
7. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proceedings of the IEEE Symposium on Security and Privacy, pages 164-173, May 1996.
8. M. Blaze, J. Feigenbaum, and M. Strauss. Compliance checking in the PolicyMaker trust management system. In Proceedings of the Second International Conference on Financial Cryptography, number 1465 in Lecture Notes in Computer Science, pages 254-274. Springer, Feb. 1998.
9. P. Bonatti and P. Samarati. Regulating service access and information release on the web. In Proceedings of the Seventh ACM Conference on Computer and Communications Security (CCS), pages 134-143, Nov. 2000.
10. K. Borders, X. Zhao, and A. Prakash. CPOL: High-performance policy evaluation. In Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS), pages 147-157, Nov. 2005.
11. Y.-H. Chu, J. Feigenbaum, B. LaMacchia, P. Resnick, and M. Strauss. REFEREE: Trust management for web applications. World Wide Web Journal, 2 (3):127-139, Summer 1997.
12. N. Damianou, N. Dulay, E. Lupu, and M. Sloman. The Ponder policy specification language. In Proceedings of the Second IEEE Workshop on Policies for Distributed Systems and Networks (POLICY), number 1995 in Lecture Notes in Computer Science, pages 18-39. Springer, Jan. 2001.
13. C. L. Forgy. Rete: A fast algorithm for the many pattern/many object pattern match problem. Artificial Intelligence, 27 (3):219-227, 1985.
14. E. Friedman-Hill. Jess: The rule engine for the Java platform. Web site, Apr. 2007. http://www.jessrules.com).
15. A. Herzberg, Y. Mass, J. Michaeli, D. Naor, and Y. Ravid. Access control meets public key infrastructure, or: Assigning roles to strangers. In Proceedings of the IEEE Symposium on Security and Privacy, pages 2-14, May 2000.
16. H. Koshutanski and F. Massacci. An interactive trust management and negotiation scheme. In Proceedings of the Second International Workshop on Formal Aspects in Security and Trust (FAST), pages 139-152, Aug. 2004.
17. A. J. Lee and M. Winslett. Towards an efficient and language-agnostic compliance checker for trust negotiation systems. Technical Report UIUCDCS-R-2007-2903, University of Illinois at Urbana Champaign Department of Computer Science, Oct. 2007.
18. J. Li, N. Li, and W. H. Winsborough. Automated trust negotiation using cryptographic credentials. In Proceedings of 12th ACM Conference on Computer and Communications Security (CCS), pages 46-57, Nov. 2005.
19. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust-management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130, May 2002.
20. D. P. Miranker. TREAT: A better match algorithm for AI production systems. In Proceedings of the Sixth National Conference on Artificial Intelligence (AAAI-87), pages 42-47, Aug. 1987.
21. K. E. Seamons, M. Winslett, T. Yu, B. Smith, E. Child, J. Jacobson, H. Mills, and L. Yu. Requirements for policy languages for trust negotiation. In Proceedings of the Third IEEE Workshop on Policies for Distributed Systems and Networks (POLICY), pages 68-79, June 2002.
22. B. Smith, K. E. Seamons, and M. D. Jones. Responding to policies at runtime in TrustBuilder. In Proceedings of the Fifth IEEE Workshop on Policies for Distributed Systems and Networks (POLICY), pages 149-158, June 2004.
23. W. H. Winsborough and N. Li. Towards practical automated trust negotiation. In Proceedings of the Third IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY), pages 92-103, June 2002.
24. W. H. Winsborough, K. E. Seamons, and V. E. Jones. Automated trust negotiation. In Proceedings of the DARPA Information Survivability Conference and Exposition, pages 88-102, Jan. 2000.
25. M. Winslett, T. Yu, K. E. Seamons, A. Hess, J. Jacobson, R. Jarvis, B. Smith, and L. Yu. Negotiating trust on the web. IEEE Internet Computing, 6 (6):30-37, Nov./Dec. 2002.
26. M. Winslett, C. Zhang, and P. A. Bonatti. PeerAccess: A logic for distributed authorization. In Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS 2005), pages 168-179, Nov. 2005.
27. D. Yao, K. Frikken, M. Atallah, and R. Tamassia. Point-based trust: Define how much privacy is worth. In Proceedings of the Eighth International Conference on Information and Communications Security (ICICS '06), number 4307 in Lecture Notes in Computer Science, pages 190-209. Springer, 2006.
28. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies throu gh interoperable strategies for automated trust negotiation. A CM Transactions on Information and System Security, 6 (1), Feb. 2003.