DMCA
The Ponder Policy Specification Language (2001)
Cached
Download Links
| Venue: | LECTURE NOTES IN COMPUTER SCIENCE |
| Citations: | 487 - 28 self |
BibTeX
@INPROCEEDINGS{Damianou01theponder,
author = {Nicodemos Damianou and Naranker Dulay and Emil Lupu and Morris Sloman},
title = {The Ponder Policy Specification Language},
booktitle = {LECTURE NOTES IN COMPUTER SCIENCE},
year = {2001},
pages = {18--38},
publisher = {Springer-Verlag}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
The Ponder language provides a common means of specifying security policies that map onto various access control implementation mechanisms for firewalls, operating systems, databases and Java. It supports obligation policies that are event triggered conditionaction rules for policy based management of networks and distributed systems. Ponder can also be used for security management activities such as registration of users or logging and auditing events for dealing with access to critical resources or security violations. Key concepts of the language include roles to group policies relating to a position in an organisation, relationships to define interactions between roles and management structures to define a configuration of roles and relationships pertaining to an organisational unit such as a department. These reusable composite policy specifications cater for the complexity of large enterprise information systems. Ponder is declarative, stronglytyped and object-oriented which makes the language flexible, extensible and adaptable to a wide range of management requirements.
Keyphrases
ponder policy specification language organisational unit common mean management requirement key concept group policy various access control implementation mechanism management structure security policy wide range ponder language security violation large enterprise information system critical resource security management activity reusable composite policy specification cater conditionaction rule obligation policy
