Position paper: A generic approach for security policies composition

Alejandro Mario Hernandez; Flemming Nielson

doi:10.1145/2336717.2336722

Position paper: A generic approach for security policies composition

Alejandro Mario Hernandez, Flemming Nielson

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

When modelling access control in distributed systems, the problem of security policies composition arises. Much work has been done on different ways of combining policies, and using different logics to do this. In this paper, we propose a more general approach based on a 4-valued logic, that abstracts from the specific setting, and groups together many of the existing ways for combining policies. Moreover, we propose going one step further, by twisting the 4-valued logic and obtaining a more traditional approach that might therefore be more appropriate for analysis.

Original language	English
Title of host publication	PLAS '12 Proceedings of the 7th Workshop on Programming Languages and Analysis for Security
Number of pages	4
Publisher	Association for Computing Machinery
Publication date	2012
Pages	Article No. 5
ISBN (Print)	978-1-4503-1441-1
DOIs	https://doi.org/10.1145/2336717.2336722
Publication status	Published - 2012
Event	7th Workshop on Programming Languages and Analysis for Security (PLAS 2012) - Beijing, China Duration: 15 Jun 2012 → …

Workshop

Workshop	7th Workshop on Programming Languages and Analysis for Security (PLAS 2012)
Country/Territory	China
City	Beijing
Period	15/06/2012 → …

Keywords

Access control
Computer programming languages
Network security
Security systems

Access to Document

10.1145/2336717.2336722

OpenUrl availability

Full text

Cite this

@inproceedings{344ca18e48a54c429b6d88c4aa5747a9,

title = "Position paper: A generic approach for security policies composition",

abstract = "When modelling access control in distributed systems, the problem of security policies composition arises. Much work has been done on different ways of combining policies, and using different logics to do this. In this paper, we propose a more general approach based on a 4-valued logic, that abstracts from the specific setting, and groups together many of the existing ways for combining policies. Moreover, we propose going one step further, by twisting the 4-valued logic and obtaining a more traditional approach that might therefore be more appropriate for analysis.",

keywords = "Access control, Computer programming languages, Network security, Security systems",

author = "Hernandez, {Alejandro Mario} and Flemming Nielson",

year = "2012",

doi = "10.1145/2336717.2336722",

language = "English",

isbn = "978-1-4503-1441-1 ",

pages = "Article No. 5",

booktitle = "PLAS '12 Proceedings of the 7th Workshop on Programming Languages and Analysis for Security",

publisher = "Association for Computing Machinery",

address = "United States",

note = "7th Workshop on Programming Languages and Analysis for Security (PLAS 2012) ; Conference date: 15-06-2012",

}

Hernandez, AM & Nielson, F 2012, Position paper: A generic approach for security policies composition. in PLAS '12 Proceedings of the 7th Workshop on Programming Languages and Analysis for Security . Association for Computing Machinery, pp. Article No. 5, 7th Workshop on Programming Languages and Analysis for Security (PLAS 2012), Beijing, China, 15/06/2012. https://doi.org/10.1145/2336717.2336722

Position paper: A generic approach for security policies composition. / Hernandez, Alejandro Mario; Nielson, Flemming.

PLAS '12 Proceedings of the 7th Workshop on Programming Languages and Analysis for Security . Association for Computing Machinery, 2012. p. Article No. 5.

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Position paper: A generic approach for security policies composition

AU - Hernandez, Alejandro Mario

AU - Nielson, Flemming

PY - 2012

Y1 - 2012

N2 - When modelling access control in distributed systems, the problem of security policies composition arises. Much work has been done on different ways of combining policies, and using different logics to do this. In this paper, we propose a more general approach based on a 4-valued logic, that abstracts from the specific setting, and groups together many of the existing ways for combining policies. Moreover, we propose going one step further, by twisting the 4-valued logic and obtaining a more traditional approach that might therefore be more appropriate for analysis.

AB - When modelling access control in distributed systems, the problem of security policies composition arises. Much work has been done on different ways of combining policies, and using different logics to do this. In this paper, we propose a more general approach based on a 4-valued logic, that abstracts from the specific setting, and groups together many of the existing ways for combining policies. Moreover, we propose going one step further, by twisting the 4-valued logic and obtaining a more traditional approach that might therefore be more appropriate for analysis.

KW - Access control

KW - Computer programming languages

KW - Network security

KW - Security systems

U2 - 10.1145/2336717.2336722

DO - 10.1145/2336717.2336722

M3 - Article in proceedings

SN - 978-1-4503-1441-1

SP - Article No. 5

BT - PLAS '12 Proceedings of the 7th Workshop on Programming Languages and Analysis for Security

PB - Association for Computing Machinery

T2 - 7th Workshop on Programming Languages and Analysis for Security (PLAS 2012)

Y2 - 15 June 2012

ER -

Position paper: A generic approach for security policies composition

Abstract

Workshop

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this