Reasoning about security: A logic and a decision method for role-based access control

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1244, Issue , 1997, Pages 421-435

  Massacci, Fabio ^a,b  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

^b SAPIENZA UNIVERSITY OF ROME   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

CALCULATIONS; COMPUTER CIRCUITS; FORMAL METHODS; SECURITY SYSTEMS; SEMANTICS;

AUTOMATED METHODS; DESIGN AND IMPLEMENTATIONS; FORMAL SEMANTICS; LOGICAL CONSEQUENCES; MODEL GENERATION; PRACTICAL REASONING; ROLE-BASED ACCESS CONTROL; SECURITY POLICY;

ACCESS CONTROL;

EID: 84947756793     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/bfb0035639     Document Type: Conference Paper

References (30)

1. M. Abadi, M. Burrows, B. Lampson, and G. Plotkin. A calculus for access control in distributed systems. ACM Trans, on Programming Languages and Systems, 15(4):706-734, 1993.
2. R. Anderson. A security policy model for clinical information systems. In Proc. of the Symp. on Security and Privacy. IEEE Press, 1996.
3. B. Beckert and R. Gore. Free variable tableaux for propositional modal logics. In Proc. of TABLEAUX-97, LNAI. Springer-Verlag, 1997. To appear.
4. D. Bell and L. La Padula. Secure computer systems: unified exposition and MUL-TICS. Report ESD-TR-75-306, The MITRE Corporation, March 1976.
5. E. Bertino, S. Jajodia, and P. Samarati. Supporting multiple access control policies in database systems. In Proc. of the Symp. on Security and Privacy, pp. 94-109. IEEE Press, 1996.
6. M. Burrows, M. Abadi, and R. Needham. A logic for authentication. ACM Trans, on Comp. Sys., 8(1):18-36, 1990. Also as research report SRC-39, DEC - System Research Center, 1989.
7. D. Clark and D. Wilson. A comparison of commercial and military computer security policies. In Proc. of the Symp. on Security and Privacy, pp. 184-194. IEEE Press, 1987.
8. F. Cuppens and R. Demolombe. A deontic logic for reasoning about confidentiality. In 3rd Int. Workshop on Deontic Logic in Computer Science, Portugal, 1996.
9. G. De Giacomo and F. Massacci. Tableaux and algorithms for propositional dynamic logic with converse. In Proc. of the 13th Int. Conf. on Automated Deduction (CADE-96), LNAI 1104, pp. 613-628. Springer-Verlag, 1996.
10. R. Fagin, J. Halpern, Y. Moses, and M. Vardi. Reasoning about Knowledge. The MIT Press, 1995.
11. D. Ferraiolo, J. Cugini, and K. Richard. Role-based access control (RBAC): Features and motivations. In Proc. of the Annual Computer Security Applications Conf.. IEEE Press, 1995.
12. D. Ferraiolo and R. Kuhn. Role based access control. In Proc. of the NIST-NCSC Nat. (U.S.) Comp. Security Conf., pp. 554-563, 1992.
13. D. Ferraiolo, D. Gilbert, and N. Lynch. An examination of federal and commercial access control policy needs. In Proc. of the NIST-NCSC Nat. (U.S.) Comp. Security Conf, pp. 107-116, 1993.
14. M. Fitting. Proof Methods for Modal and Intuitionistic Logics. Reidel, 1983.
15. L. Giuri and P. Iglio. A formal model for role based access control with constraints. In Proc. of the Computer Security Foundations Workshop, pp. 136-145. IEEE Press, 1996.
16. J. Glasgow, J. MacEwen, and P. Panangaden. A logic for reasoning about security. In Proc. of the Symp. on Security and Privacy, pp. 2-13. IEEE Press, 1990.
17. J. Halpern and Y. Moses. A guide to completeness and complexity for modal logics of knowledge and belief. Artificial Intelligence, 54:319-379, 1992.
18. M. Harrison, W. Ruzzo, and J. Ullman. Protection in operating systems. Comm, of the ACM, 19(8):461-471, 1976.
19. S. Kanger. Law and logic. Theoria, 38(3):105-132, 1972.
20. C. Krogh. Obligations in multiagent systems. In Scandinavian Conf. on Artificial Intelligence (SCAI-95), pp. 29-31. ISO Press, 1995.
21. B. Lampson. Protection. ACM Operating Sys. Reviews, 8(1):18-24, 1974.
22. B. Lampson, M. Abadi, M. Burrows, and E. Wobber. Authentication in distributed systems: Theory and practice. ACM Trans, on Computer Systems, 10(4):265-310, 1992.
23. F. Massacci. Strongly analytic tableaux for normal modal logics. In Proc. of the Int. Conf. on Automated Deduction (CADE-94), LNAI 814, pp. 723-737. Springer Verlag, 1994.
24. F. Massacci. Tableaux methods for access control in distributed systems. In Proc. of TABLEAUX-97, LNAI. Springer-Verlag, 1997. To appear.
25. C. McCollum, J. Messing, and L. Notargiacomo. Beyond the pale of MAC and DAC - defining new forms of access control. In Proc. of the Symp. on Security and Privacy, pp. 190-200, IEEE Press, 1990.
26. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access controls models. IEEE Computer, 29(2), February 1996.
27. R. Sandhu. The typed access matrix model. In Proc. of the Symp. on Security and Privacy, pp. 122-136. IEEE Press, 1992.
28. R. Sandhu and P. Samarati. Access control: Principles and practice. IEEE Communications Magazine, pp. 40-48, September 1994.
29. P. Syverson. The use of logic in the analysis of cryptographic protocols. In Proc. of the Symp. on Security and Privacy, pp. 156-170. IEEE Press, 1991.
30. P. Syverson and P. van Oorschot. On unifying some cryptographic protocols logics. In Proc. of the Symp. on Security and Privacy. IEEE Press, 1994.