From contextual permission to dynamic pre-obligation: An integrated approach

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 70-78

  Elrakaiby, Yehia ^a   Cuppens, Frédéric ^a   Boulahia, Nora Cuppens ^a  

^a INSTITUT MINES TELECOM   (France)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHORIZATION POLICY; DECLARATIVE SEMANTICS; EVENT-CONDITION-ACTION RULE; INTEGRATED APPROACH; OPERATIONAL SEMANTICS; PREDICATE LOGIC;

SEMANTICS;

FORMAL LOGIC;

EID: 77952406144     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.71     Document Type: Conference Paper

References (12)

1. C. Bettini, S. Jajodia, X. S. Wang, and D. Wijesekera, "Provisions and obligations in policy rule management," J. Netw. Syst. Manage., vol. 11, pp. 351-372, 2003.
2. -, "Provisions and obligations in policy management and security applications," in Proceedings of the 28th international conference on Very Large Data Bases, 2002, pp. 502-513.
3. Q. Ni, E. Bertino, and J. Lobo, "An obligation model bridging access control policies and privacy policies," in SACMAT, 2008.
4. C. Baral, J. Lobo, and G. Trajcevski, "Formal characterizations of active databases: Part ii," in Deductive and Object-Oriented Databases, S. B. Heidelberg, Ed., 1997. [Online]. Available: http://dx.doi.org/10.1007/3-540- 63792-319
5. F. Cuppens and N. Cuppens-Boulahia, "Modeling contextual security policies," Int. J. Inf. Secur., vol. 7, 2008.
6. Y. Elrakaiby, F. Cuppens, and N. Cuppens-Boulahia, "From state-event to event-based management of security policies," 3rd International Workshop on Context Modeling and Management for Smart Environments, 2009.
7. ABC usage control model," ACM Trans. Inf. Syst. Secur, 2004.
8. M. Y. Becker and S. Nanz, "The role of abduction in declarative authorization policies," in PADL, 2008, pp. 84-99.
9. P. A. Bonatti, D. Olmedilla, and J. Peer, "Advanced policy explanations on the web," in Proceeding of the 2006 conference on ECAI 2006. Amsterdam, The Netherlands, The Netherlands: IOS Press, 2006, pp. 200-204.
10. H. Koshutanski and F. Massacci, "Interactive access control for web services," in In Proceedings of the 19th IFIP International Information Security Conference, 2004.
11. M. Y. Becker and S. Nanz, "A logic for state-modifying authorization policies," in ESORICS, 2007.
12. Y. El Rakaiby, F. Cuppens, and N. Cuppens-Boulahia, "For-malization and management of group obligations," in POLICY, July 2009.