Defeasible security policy composition for web services

ABSTRACT

The ability to automatically compose security policies created by multiple organizations is fundamental to the development of scalable security systems. The diversity of policies leads to conflicts and the need to resolve priorities between rules. In this paper we explore the concept of defeasible policy composition, wherein policies are represented in defeasible logic and composition is based on rules for non-monotonic inference. This enables policy writers to assert rules tentatively; when policies are composed the policy with the firmest position takes precedence. In addition, the structure of our policies allows for composition to occur using a single operator; this allows for entirely automated composition. We argue that this provides a practical system that can be understood by typical policy writers, analyzed rigorously by theoreticians, and efficiently automated by computers. We aim to partially validate these claims here with a formulation of defeasible policy composition for web services, an emerging foundation for B2B commerce on the World Wide Web.

REFERENCES

• 1: E. S. Al Shaer and H. H. Hamend. Discovery of policy anomalies in distributed firewalls. In IEEE INFOCOMM , 2004.
• 2: Amazon web services. Web Page, Jan. 2006. www.amazon.com/gp/aws/landing.html.
• 3: G. Antoniou , D. Billington , M. J. Maher, On the Analysis of Regulations using Defeasible Rules, Proceedings of the Thirty-second Annual Hawaii International Conference on System Sciences-Volume 6, p.6033, January 05-08, 1999
• 4: Grigoris Antoniou , Aditya K. Ghose, What is Default Reasoning Good For ? Applications Revisited, Proceedings of the Thirty-second Annual Hawaii International Conference on System Sciences-Volume 6, p.6034, January 05-08, 1999
• 5: G. Antoniou, M. J. Maher, and D. Billington. Defeasible logic versus logic programming without negation as failure. Journal of Logic Programming, 42(1):47--57, 2000.
• 6: S. Batres and C. Ferris (Editors). Web services reliable messaging policy assertion(WS-RM Policy). Specification, Feb. 2005. msdn.microsoft.com/library/en-us/dnglobspec/html/WS-RMPolicy.pdf.
• 7: Elisa Bertino , Sushi1 Jajodia , Pierangela Samarati, Supporting Multiple Access Control Policies in Database Systems, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.94, May 06-08, 1996
• 8: Karthikeyan Bhargavan , Cédric Fournet , Andrew D. Gordon, Verifying policy-based security for web services, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA [doi>10.1145/1030083.1030120]
• 9: Karthikeyan Bhargavan , Cedric Fournet , Andrew D. Gordon , Stephen Tse, Verified Interoperable Implementations of Security Protocols, Proceedings of the 19th IEEE Workshop on Computer Security Foundations, p.139-152, July 05-07, 2006 [doi>10.1109/CSFW.2006.32]
• 10: Christophe Bidan , Valérie Issarny, Dealing with Multi-policy Security in Large Open Distributed Systems, Proceedings of the 5th European Symposium on Research in Computer Security, p.51-66, September 16-18, 1998
• 11: Piero Bonatti , Sabrina de Capitani di Vimercati , Pierangela Samarati, A modular approach to composing access control policies, Proceedings of the 7th ACM conference on Computer and communications security, p.164-173, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352623]
• 12: L. Cholvy , F. Cuppens, Analyzing consistency of security policies, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.103, May 04-07, 1997
• 13: D. Eastlake and J. Reagle(Chairs). W3C XML-DSig working group. Web Page, Jan. 2006. www.w3.org/Signature/.
• 14: Web services reliable messaging protocol(WS-R eliable M essaging). Specification, Feb. 2005. msdn.microsoft.com/library/en-us/dnglobspec/html/WS-ReliableMessaging.p%df.
• 15: I. Foster, C. Kesselman, J. M. Nick, and S. Tuecke. The physiology of the grid: An open grid services architecture for distributed systems integration. In Open Grid Service Infrastructure Working Group, Global Grid Forum, Jun. 2002.
• 16: K. Frankish. Non-monotonic inference. In The Encyclopedia of Language and Linguistics. Elsevier, second edition, 2005.
• 17: Google web APIs. Web Page, Jan. 2006. www.google.com/apis/.
• 18: G. Governatori, A. H. M. ter Hofstede, and P. Oaks. Defeasible logic for automated negotiation. In P. Swatman and P. M. Swatman, editors, Proceedings of CollECTeR, 2000.
• 19: G. Governatori, A. H. M. ter Hofstede, and P. Oaks. Is defeasible logic applicable? In G. Antoniou and G. Governatori, editors, Proceedings of the 2nd Australasian Workshop on Computational Logic, pages 47--62, Brisbane January 2001. Queensland University of Technology.
• 20: Benjamin N. Grosof , Yannis Labrou , Hoi Y. Chan, A declarative approach to business rules in contracts: courteous logic programs in XML, Proceedings of the 1st ACM conference on Electronic commerce, p.68-77, November 03-05, 1999, Denver, Colorado, United States [doi>10.1145/336992.337010]
• 21: J. Halpern and V. Weissman. Using first-order logic to reason about policies. In IEEE Computer Security Foundations Workshop (CSFW '03), Jun. 2003.
• 22: S. Horrell. Web services enhancements 2.0 support for WS-P olicy. Web Page, July 2004. msdn.microsoft.com/library/en-us/dnwse/html/wse2wspolicy.asp.
• 23: C. Kaler and A. Nadalin (Editors). Web services federation language (WS-F ederation). Specification, Jul. 2003. www-106.ibm.com/developerworks/webservices/library/ws-fed/.
• 24: Emil C. Lupu , Morris Sloman, Conflicts in Policy-Based Distributed Systems Management, IEEE Transactions on Software Engineering, v.25 n.6, p.852-869, November 1999 [doi>10.1109/32.824414]
• 25: Kevin D. Lux , Michael J. May , Nayan L. Bhattad , Carl A. Gunter, WSEmail: Secure Internet Messaging Based on Web Services, Proceedings of the IEEE International Conference on Web Services (ICWS'05), p.75-82, July 11-15, 2005 [doi>10.1109/ICWS.2005.138]
• 26: Michael J. Maher, Propositional defeasible logic has linear complexity, Theory and Practice of Logic Programming, v.1 n.6, p.691-711, November 2001 [doi>10.1017/S1471068401001168]
• 27: Michael J. May , Wook Shin , Carl A. Gunter , Insup Lee, Securing the drop-box architecture for assisted living, Proceedings of the fourth ACM workshop on Formal methods in security, p.1-12, November 03-03, 2006, Alexandria, Virginia, USA [doi>10.1145/1180337.1180338]
• 28: Michael McDougall , Rajeev Alur , Carl A. Gunter, A model-based approach to integrating security policies for embedded devices, Proceedings of the 4th ACM international conference on Embedded software, September 27-29, 2004, Pisa, Italy [doi>10.1145/1017753.1017789]
• 29: Michael Mcdougall , Carl A. Gunter , Rajeev Alur, Modeling and analyzing integrated policies, University of Pennsylvania, Philadelphia, PA, 2005
• 30: A. Nadalin (Editor). Web services security policy language (WS-SecurityPolicy). Web Services Specification, 2002. www.verisign.com/wss/WS-SecurityPolicy.pdf.
• 31: D. Nute. Defeasible logic. In 14th International Conference on Applications of Prolog, Oct. 2001.
• 32: J. Reagle (Chair). W3C XML encryption working group. Web Page, Jan. 2006. www.w3.org/Encryption/2001/.
• 33: Daniel M. Reeves , Michael P. Wellman , Benjamin N. Grosof, Automated negotiation from declarative contract descriptions, Proceedings of the fifth international conference on Autonomous agents, p.51-58, May 2001, Montreal, Quebec, Canada [doi>10.1145/375735.375867]
• 34: A. Rock. Deimos: A query answering defeasible logic system. Technical report, Griffith University, Mar. 2004 www.cit.gu.edu.au/~arock/defeasible/doc/Deimos-long.pdf.
• 35: J. Schlimmer (Editor). Web services policy framework (WS-Policy). Web Services Specification, 2004. ftp://www6.software.ibm.com/software/developer/library/ws-policy.pdf.
• 36: C. Sharp (Editor). Web services policy attachment (WS-P olicy A ttachment). Specification, Sept. 2004. msdn.microsoft.com/library/en us/dnglobspec/html/ws-policyattachment.as%p.
• 37: SOAP version 1.2. W3C Recommendation, Jan. 2006. www.w3.org/TR/soap12.

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
      I.2.3 Deduction and Theorem Proving
          Subjects: Nonmonotonic reasoning and belief revision

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

  F. Theory of Computation
  F.4 MATHEMATICAL LOGIC AND FORMAL LANGUAGES
      F.4.1 Mathematical Logic

  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.5 On-line Information Services
          Subjects: Web-based services

  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
      I.2.3 Deduction and Theorem Proving
          Subjects: Nonmonotonic reasoning and belief revision

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Keywords:
defeasible logic, security policy composition, web services