17th IEEE Computer Security Foundations Workshop (CSFW'04)
Owned Policies for Information Security
Pacific Grove, California
June 28-June 30
ISBN: 0-7695-2169-X
In many systems, items of information have owners associated with them. An owner of an item of information may want the systemto enforce a policy that restricts use of that information; we call such a policy an owned policy . Owned policies can be used in many contexts, including information flow, access control, and software licensing. In this paper we introduce and study a general framework for owned policies. Relationships between security policies for a given system may be dependent on system aspects that change between or during system execution. As a result, there may be only partial knowledge of the structure of security policies available when analyzing a system statically. We demonstrate that our framework permits static reasoning about owned policies under partial knowledge, and we also exhibit tractability results for the problem of inferring security policies.
Citation:
Hubie Chen, Stephen Chong, "Owned Policies for Information Security," csfw, pp.126, 17th IEEE Computer Security Foundations Workshop (CSFW'04), 2004
Usage of this product signifies your acceptance of the
Terms of Use.
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||