Static validation of licence conformance policies

Rene Rydhof Hansen; Flemming Nielson; Hanne Riis Nielson; Christian W. Probst

doi:10.1109/ARES.2008.162

Static validation of licence conformance policies

Rene Rydhof Hansen
, Flemming Nielson
, Hanne Riis Nielson
, Christian W. Probst

Aalborg University

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

Policy conformance is a security property gaining importance due to commercial interest like Digital Rights Management. It is well known that static analysis can be used to validate a number of more classical security policies, such as discretionary and mandatory access control policies, as well as communication protocols using symmetric and asymmetric cryptography. In this work we show how to develop a Flow Logic for validating the conformance of client software with respect to a licence conformance policy. Our approach is sufficiently flexible that it extends to fully open systems that can admit new services on the fly.

Original language	English
Title of host publication	Proceedings of the 3rd International Conference on Availability, Reliability, and Security
Publisher	IEEE Computer Society Press
Publication date	2008
Pages	1104-1111
ISBN (Print)	978-0-7695-3102-1
DOIs	https://doi.org/10.1109/ARES.2008.162
Publication status	Published - 2008
Event	Third International Conference on Availability, Reliability and Security - Barcelona, Spain Duration: 4 Mar 2008 → 7 Mar 2008 Conference number: 3

Conference

Conference	Third International Conference on Availability, Reliability and Security
Number	3
Country/Territory	Spain
City	Barcelona
Period	04/03/2008 → 07/03/2008

Access to Document

10.1109/ARES.2008.162

OpenUrl availability

Check availability in DTU Findit

Cite this

@inproceedings{baa86ae379d24d7297ce6b7b25691c7d,

title = "Static validation of licence conformance policies",

abstract = "Policy conformance is a security property gaining importance due to commercial interest like Digital Rights Management. It is well known that static analysis can be used to validate a number of more classical security policies, such as discretionary and mandatory access control policies, as well as communication protocols using symmetric and asymmetric cryptography. In this work we show how to develop a Flow Logic for validating the conformance of client software with respect to a licence conformance policy. Our approach is sufficiently flexible that it extends to fully open systems that can admit new services on the fly.",

author = "Hansen, \{Rene Rydhof\} and Flemming Nielson and Nielson, \{Hanne Riis\} and Probst, \{Christian W.\}",

year = "2008",

doi = "10.1109/ARES.2008.162",

language = "English",

isbn = "978-0-7695-3102-1",

pages = "1104--1111",

booktitle = "Proceedings of the 3rd International Conference on Availability, Reliability, and Security",

publisher = "IEEE Computer Society Press",

note = "Third International Conference on Availability, Reliability and Security, ARES 2008 ; Conference date: 04-03-2008 Through 07-03-2008",

}

Hansen, RR, Nielson, F, Nielson, HR & Probst, CW 2008, Static validation of licence conformance policies. in Proceedings of the 3rd International Conference on Availability, Reliability, and Security. IEEE Computer Society Press, pp. 1104-1111, Third International Conference on Availability, Reliability and Security, Barcelona, Spain, 04/03/2008. https://doi.org/10.1109/ARES.2008.162

Static validation of licence conformance policies. / Hansen, Rene Rydhof; Nielson, Flemming; Nielson, Hanne Riis et al.
Proceedings of the 3rd International Conference on Availability, Reliability, and Security. IEEE Computer Society Press, 2008. p. 1104-1111.

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

TY - GEN

T1 - Static validation of licence conformance policies

AU - Hansen, Rene Rydhof

AU - Nielson, Flemming

AU - Nielson, Hanne Riis

AU - Probst, Christian W.

N1 - Conference code: 3

PY - 2008

Y1 - 2008

N2 - Policy conformance is a security property gaining importance due to commercial interest like Digital Rights Management. It is well known that static analysis can be used to validate a number of more classical security policies, such as discretionary and mandatory access control policies, as well as communication protocols using symmetric and asymmetric cryptography. In this work we show how to develop a Flow Logic for validating the conformance of client software with respect to a licence conformance policy. Our approach is sufficiently flexible that it extends to fully open systems that can admit new services on the fly.

AB - Policy conformance is a security property gaining importance due to commercial interest like Digital Rights Management. It is well known that static analysis can be used to validate a number of more classical security policies, such as discretionary and mandatory access control policies, as well as communication protocols using symmetric and asymmetric cryptography. In this work we show how to develop a Flow Logic for validating the conformance of client software with respect to a licence conformance policy. Our approach is sufficiently flexible that it extends to fully open systems that can admit new services on the fly.

U2 - 10.1109/ARES.2008.162

DO - 10.1109/ARES.2008.162

M3 - Article in proceedings

SN - 978-0-7695-3102-1

SP - 1104

EP - 1111

BT - Proceedings of the 3rd International Conference on Availability, Reliability, and Security

PB - IEEE Computer Society Press

T2 - Third International Conference on Availability, Reliability and Security

Y2 - 4 March 2008 through 7 March 2008

ER -

Static validation of licence conformance policies

Abstract

Conference

Access to Document

OpenUrl availability

Fingerprint

Cite this