On the specification and evolution of access control policies

ABSTRACT

A uniform and precise framework for the specification of access control policies is proposed. The uniform framework allows the detailed comparison of different policy models, the precise description of the evolution of a policy, and an accurate analysis of the interaction between policies and of the behavior of their integration. The evolution and integration of policies are illustrated using a Discretionary Access Control policy and a Lattice Based Access Control policy. The framework is based on the theory of graph transformations.

REFERENCES

• 1: Piero Bonatti , Sabrina de Capitani di Vimercati , Pierangela Samarati, A modular approach to composing access control policies, Proceedings of the 7th ACM conference on Computer and communications security, p.164-173, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352623]
• 2: Andrea Corradini , Francesca Rossi , Francesco Parisi-Presicce, Logic programming as hypergraph rewriting, Proceedings of the international joint conference on theory and practice of software development on Colloquium on trees in algebra and programming (CAAP '91): vol 1, p.275-295, April 1991, Brighton, United Kingdom
• 3: H. Ehrig , G. Engels , H.-J. Kreowski , G. Rozenberg, Handbook of graph grammars and computing by graph transformation: vol. 2: applications, languages, and tools, World Scientific Publishing Co., Inc., River Edge, NJ, 1999
• 4: Martin Große-Rhode , Francesco Parisi-Presicce , Marta Simeoni, Spatial and Temporal Refinement of Typed Graph Transformation Systems, Proceedings of the 23rd International Symposium on Mathematical Foundations of Computer Science, p.553-561, August 24-28, 1998
• 5: R. Heckel and A. Wagner. Ensuring consistency of conditional graph grammars - a constructive approach. In Proc. of SEGRAGRA'95, number 2. Electronic Notes of TCS, 1995. http://www.elsevier.nl/locate/entcs/volume2.html.
• 6: Manuel Koch , Luigi V. Mancini , Francesco Parisi-Presicce, A Formal Model for Role-Based Access Control Using Graph Transformation, Proceedings of the 6th European Symposium on Research in Computer Security, p.122-139, October 04-06, 2000
• 7: Manuel Koch , Luigi V. Mancini , Francesco Parisi-Presicce, Foundations for a Graph-Based Approach to the Specification of Access Control Policies, Proceedings of the 4th International Conference on Foundations of Software Science and Computation Structures, p.287-302, April 02-06, 2001
• 8: Grzegorz Rozenberg, Handbook of graph grammars and computing by graph transformation: volume I. foundations, World Scientific Publishing Co., Inc., River Edge, NJ, 1997
• 9: Ravi S. Sandhu, Lattice-Based Access Control Models, Computer, v.26 n.11, p.9-19, November 1993 [doi>10.1109/2.241422]
• 10: R. S. Sandhu. Role-Based Access Control. In Advances in Computers, volume 46. Academic Press, 1998.
• 11: R. Sandu and P. Samarati. Access Control: Principles and Practice. IEEE Communication Magazine, pages 40-48, 1994.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

Additional Classification:
  G. Mathematics of Computing
  G.2 DISCRETE MATHEMATICS

  H. Information Systems
  H.2 DATABASE MANAGEMENT

General Terms:
Design, Management, Performance, Security, Theory

Keywords:
graph transformation systems, methodology, specification