An Algebra for Composing Access Control Policies

ACM Transactions on Information and System Security

Volumn 5, Issue 1, 2002, Pages 1-35

  Bonatti, Piero ^a   Samarati, Pierangela ^a   De Di Capitani Vimercati, Sabrina ^b  

^a UNIVERSITY OF MILAN   (Italy)

^b UNIVERSITY OF BRESCIA   (Italy)

Author keywords

Access Control; Algebra; Design; Logic Programs; Policy Composition; Security

Indexed keywords

EID: 85025424440     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/504909.504910     Document Type: Article

References (22)

1. Abadi, M. and Lamport, L. 1992. Composing Specifications. ACM Trans. Program. Lang. 14, 4 (Oct.), 1-60.
2. Banisar, D. and Davies, S. 1999. Privacy & Human Rights-An International Survey of Privacy Laws and Developments. EPIC.
3. Bertino, E., Jajodia, S., and Samarati, P. 1999. A flexible authorization mechanism for relational data management systems. ACM Trans. Inf. Syst. 17, 2 (April), 101-140.
4. Bonatti, P., De Capitani Di Vimercati, S., and Samarati, P. 2000. A modular approach to composing access control policies. In Proceedings of the Seventh ACM Conference on Computer and Communication Security (CCS 2000) (Athens, Greece, Nov.), 164-173.
5. Damiani, E., De Capitani Di Vimercati, S., Paraboschi, S., and Samarati, P. 2000. Design and implementation of an access control processor for XML documents. In Proceedings of the WWW9 Conference (Amsterdam, May).
6. Gelfond, M. and Lifschitz, V. 1988. The stable model semantics for logic programming. In Proceedings of the International Conference on Logic Programming (ICLP'88), MIT Press, Cambridge, Mass., 1070-1080.
7. Hosmer, H. 1992. The multipolicy paradigm. In Proceedings of the Fifteenth National Computer Security Conference (Baltimore, Oct.), 409-422.
8. Jaeger, T. 1999. Access control in configurable systems. In Secure Internet Programming, J. Vitek and C. Jensen, Eds., Vol. 1603, Springer-Verlag, New York, 289-310.
9. Jajodia, S., Samarati, P., Sapino, M., and Subrahmanian, V. 2001. A unified framework for supporting multiple access control policies. ACM Trans. Database Syst. 26, 2 (June), 214-260.
10. Kanellakis, P. 1990. Elements of relational database theory. In Handbook of Theoretical Computer Science, J. van Leeuwen, Ed., Elsevier, New York, Chapter 17.
11. Landwehr, C. 1981. Formal models for computer security. Comput. Surv. 13, 3 (Sept.), 247-278.
12. LI, N., Feigenbaum, J., and GROSOF, B. 1999. A logic-based knowledge representation for authorization with delegation. In Proceedings of the Twelfth IEEE Computer Security Foundations Workshop (Mordano, Italy, June), 162-174.
13. Lifschitz, V. and Turner, H. 1994. Splitting a logic program. In Proceedings of the International Conference on Logic Programming (ICLP'94), MIT Press, Cambridge, Mass., 23-37.
14. Lloyd, J. 1984. Foundations of Logic Programming. Springer-Verlag, New York.
15. Lunt, T. 1989. Access control policies for database systems. In Database Security II: Status and Prospects, C. Landwehr, Ed., North-Holland, Amsterdam, The Netherlands, 41-52.
16. Rabitti, F., Bertino, E., Kim, W., and Woelk, D. 1991. A model of authorization for next-generation database systems. ACM Trans. Database Syst. 16, 1 (March), 89-131.
17. Sagonas, K., Swift, T., Wabren, D., Freire, J., and RAO, P. 2000. The XSB programmer's manual, version 2.2. http://xsb.sourceforge.net.
18. Sandhu, R. 1993. Lattice-based access control models. IEEE Computer 26, 11 (Nov.), 9-19.
19. Shen, H. and Dewan, P. 1992. Access control for collaborative environments. In Proceedings of the International Conference on Computer Supported Cooperative Work (Toronto, Nov.), 51-58.
20. Sterling, L. and Shapiro, E. 1997. The Art of Prolog. MIT Press, Cambridge, Mass.
21. Subrahmanian, V., Adali, S., Brink, A., Emery, R., Lu, J., Rajput, A., Rogers, T., Ross, R., and Ward, C. 1997. Hermes: Heterogeneous reasoning and mediator system. http://www.cs.umd.edu/projects/ hermes/publications/abstracts/hermes.html.
22. Woo, T. and Lam, S. 1993. Authorizations in distributed systems: A new approach. J. Comput. Sec. 2, 2-3, 107-136.