A logical language for expressing authorizations Export

@inproceedings{Jajodia97, abstract = {A major drawback of existing access control systems is that they have all been developed with a specific access control policy in mind. This means that all protection requirements (i.e. accesses to be allowed or denied) must be specified in terms of the policy enforced by the system. While this may be trivial for some requirements, specification of other requirements may become quite complex or even impossible. The reason for this is that a single policy simply cannot capture the different protection requirements that users may need to enforce on different data. In this paper, we take a first step towards a model that is able to support different access control policies. We propose a logical language for the specification of authorizations on which such a model can be based. The Authorization Specification Language (ASL) allows users to specify, together with the authorizations, the policy according to which access control decisions are to be made. Policies are expressed by means of rules which enforce the derivation of authorizations, conflict resolution, access control and integrity constraint checking. We illustrate the power of our language by showing how different constraints that are sometimes required, but very seldom supported by existing access control systems, can be represented in our language}, author = {Jajodia, Sushil and Samarati, Pierangela and Subrahmanian, V. S.}, booktitle = {1997 IEEE Symposium on Security and Privacy}, citeulike-article-id = {5486351}, citeulike-linkout-0 = {http://dx.doi.org/10.1109/SECPRI.1997.601312}, citeulike-linkout-1 = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=601312}, doi = {10.1109/SECPRI.1997.601312}, isbn = {0-8186-7828-3}, journal = {1997 IEEE Symposium on Security and Privacy}, keywords = {1997, access-control, language, policy, security, specification, system}, location = {Oakland, CA, USA}, pages = {31--42}, posted-at = {2009-08-19 13:44:21}, priority = {2}, publisher = {IEEE Computer Society Press}, title = {A logical language for expressing authorizations}, url = {http://dx.doi.org/10.1109/SECPRI.1997.601312}, year = {1997} }

TY - CONF ID - Jajodia97 L3 - citeulike-article-id:5486351 N2 - A major drawback of existing access control systems is that they have all been developed with a specific access control policy in mind. This means that all protection requirements (i.e. accesses to be allowed or denied) must be specified in terms of the policy enforced by the system. While this may be trivial for some requirements, specification of other requirements may become quite complex or even impossible. The reason for this is that a single policy simply cannot capture the different protection requirements that users may need to enforce on different data. In this paper, we take a first step towards a model that is able to support different access control policies. We propose a logical language for the specification of authorizations on which such a model can be based. The Authorization Specification Language (ASL) allows users to specify, together with the authorizations, the policy according to which access control decisions are to be made. Policies are expressed by means of rules which enforce the derivation of authorizations, conflict resolution, access control and integrity constraint checking. We illustrate the power of our language by showing how different constraints that are sometimes required, but very seldom supported by existing access control systems, can be represented in our language CY - Oakland, CA, USA JF - 1997 IEEE Symposium on Security and Privacy SN - 0-8186-7828-3 EP - 42 TI - A logical language for expressing authorizations PB - IEEE Computer Society Press T2 - 1997 IEEE Symposium on Security and Privacy SP - 31 KW - 1997 KW - access-control KW - language KW - policy KW - security KW - specification KW - system AU - Jajodia, Sushil AU - Samarati, Pierangela AU - Subrahmanian, VS PY - 1997/// UR - http://dx.doi.org/10.1109/SECPRI.1997.601312 ER -