A Logic of Access Control Export

@article{citeulike:1560733, abstract = {The effectiveness of an access control mechanism in implementing a security policy in a centralized operating system is often weakened because of the large number of possible access rights involved, informal specification of security policy and a lack of tools for assisting systems administrators. Herein we present a logical foundation for automated tools that assist in determining which access rights should be granted by reasoning about the effects of an access control mechanism on the computations performed by an operating system. We demonstrate the practicality and utility of our logical approach by showing how it allows us to construct a deductive database capable of answering questions about the security of two real-world operating systems. We illustrate the application of our techniques by presenting the results of an experiment designed to assess how accurately the configuration of an access control mechanism implements a given security policy. 10.1093/comjnl/44.1.54}, author = {Crampton, Jason and Loizou, George and O'Shea, Greg}, citeulike-article-id = {1560733}, citeulike-linkout-0 = {http://dx.doi.org/10.1093/comjnl/44.1.54}, citeulike-linkout-1 = {http://comjnl.oxfordjournals.org/cgi/content/abstract/44/1/54}, day = {1}, doi = {10.1093/comjnl/44.1.54}, journal = {The Computer Journal}, keywords = {access, control, logic}, month = {January}, number = {1}, pages = {54--66}, posted-at = {2007-11-14 07:11:48}, priority = {2}, title = {A Logic of Access Control}, url = {http://dx.doi.org/10.1093/comjnl/44.1.54}, volume = {44}, year = {2001} }

TY - JOUR ID - citeulike:1560733 L3 - citeulike-article-id:1560733 N2 - The effectiveness of an access control mechanism in implementing a security policy in a centralized operating system is often weakened because of the large number of possible access rights involved, informal specification of security policy and a lack of tools for assisting systems administrators. Herein we present a logical foundation for automated tools that assist in determining which access rights should be granted by reasoning about the effects of an access control mechanism on the computations performed by an operating system. We demonstrate the practicality and utility of our logical approach by showing how it allows us to construct a deductive database capable of answering questions about the security of two real-world operating systems. We illustrate the application of our techniques by presenting the results of an experiment designed to assess how accurately the configuration of an access control mechanism implements a given security policy. 10.1093/comjnl/44.1.54 IS - 1 JF - The Computer Journal EP - 66 TI - A Logic of Access Control VL - 44 SP - 54 KW - access KW - control KW - logic AU - Crampton, Jason AU - Loizou, George AU - O'Shea, Greg PY - 2001/01/01/ UR - http://dx.doi.org/10.1093/comjnl/44.1.54 ER -