Specifying and reasoning about dynamic access-control policies

DMCA

Specifying and reasoning about dynamic access-control policies (2006)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Daniel J. Dougherty , Kathi Fisler , Shriram Krishnamurthi

Venue:	of Lecture Notes in Computer Science
Citations:	52 - 3 self

BibTeX

@INPROCEEDINGS{Dougherty06specifyingand,
    author = {Daniel J. Dougherty and Kathi Fisler and Shriram Krishnamurthi},
    title = {Specifying and reasoning about dynamic access-control policies},
    booktitle = {of Lecture Notes in Computer Science},
    year = {2006},
    pages = {632--646},
    publisher = {Springer}
}

OpenURL

Abstract

Abstract. Access-control policies have grown from simple matrices to non-trivial specifications written in sophisticated languages. The increasing complexity of these policies demands correspondingly strong automated reasoning techniques for understanding and debugging them. The need for these techniques is even more pressing given the rich and dynamic nature of the environments in which these policies evaluate. We define a framework to represent the behavior of accesscontrol policies in a dynamic environment. We then specify several interesting, decidable analyses using first-order temporal logic. Our work illustrates the subtle interplay between logical and state-based methods, particularly in the presence of three-valued policies. We also define a notion of policy equivalence that is especially useful for modular reasoning. 1

Keyphrases

dynamic access-control policy first-order temporal logic simple matrix several interesting accesscontrol policy access-control policy non-trivial specification state-based method sophisticated language dynamic environment policy equivalence decidable analysis modular reasoning three-valued policy dynamic nature subtle interplay

DMCA