loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
17th IEEE Computer Security Foundations Workshop (CSFW'04)
Owned Policies for Information Security
Pacific Grove, California
June 28-June 30
ISBN: 0-7695-2169-X
Hubie Chen, Cornell University, Ithaca, NY
Stephen Chong, Cornell University, Ithaca, NY
In many systems, items of information have owners associated with them. An owner of an item of information may want the systemto enforce a policy that restricts use of that information; we call such a policy an owned policy . Owned policies can be used in many contexts, including information flow, access control, and software licensing. In this paper we introduce and study a general framework for owned policies.
Relationships between security policies for a given system may be dependent on system aspects that change between or during system execution. As a result, there may be only partial knowledge of the structure of security policies available when analyzing a system statically. We demonstrate that our framework permits static reasoning about owned policies under partial knowledge, and we also exhibit tractability results for the problem of inferring security policies.
Citation:
Hubie Chen, Stephen Chong, "Owned Policies for Information Security," csfw, pp.126, 17th IEEE Computer Security Foundations Workshop (CSFW'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.