DMCA
A trust management approach for flexible policy management in security-typed languages. http://elephant.cs.uiuc.edu/ sbandha2/publications/ccs07.pdf
| Citations: | 9 - 0 self |
BibTeX
@MISC{Bandhakavi_atrust,
author = {Sruthi Bandhakavi and William Winsborough and Marianne Winslett},
title = {A trust management approach for flexible policy management in security-typed languages. http://elephant.cs.uiuc.edu/ sbandha2/publications/ccs07.pdf},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Early work on security-typed languages required that legal information flows be defined statically. More recently, techniques have been introduced that relax these assumptions and allow policies to change at run-time. For example, the Rx language uses a policy language based on RT, a trust management framework for representing authorization policies. While Rx made significant strides toward the goal of allowing policy updates in security-typed languages, in this paper we observe that certain design choices of Rx violate the privacy and autonomy requirements of principals in trust management systems, thus making decentralized control over information difficult. To address these problems, we propose RTI, a new security-typed language. In addition to avoiding prior pitfalls, RTI’s most distinguishing characteristic is that it supports fine-grained specification of security for dynamic policy. We also provide a proof of noninterference for RTI. 1
Keyphrases
security-typed language flexible policy management edu sbandha2 publication trust management approach new security-typed language trust management framework early work authorization policy policy language prior pitfall dynamic policy autonomy requirement fine-grained specification trust management system certain design choice policy update legal information distinguishing characteristic significant stride rx language
