A prototype development of a declarative approach for computer system security

Yun Bai; Edward Caprin; Yan Zhang

A prototype development of a declarative approach for computer system security

Western Sydney University

Research output: Chapter in Book / Conference Paper › Conference Paper › peer-review

Abstract

In information security, representation and reasoning of authorization policy has been a key research topic in this field especially in a sophisticated information sharing and exchange environment [6, 7, 9]. In such a scenario, an user's request to access the system may not be able to decide straightaway, it may initiate a sequence of complex executions of authorization commands in order to determine either to grant or deny such a request. Becker and Nanz's logic of State-Modifying Policies (SMP) is a formal system addressing such problem in access control. In this paper, we provide a declarative semantics for SMP through a translation from SMP to Answer Set Programming (ASP) and propose a system prototype to implement our approach. Our experimental results show that our ASP implementation for SMP reasoning is effective to deal with real world problem domains.

Original language	English
Title of host publication	Proceedings of the 29th International Conference on Computer Applications in Industry and Engineering, (CAINE 2016), Denver, Colorado, USA, 26-28 September 2016
Publisher	The International Society for Computers and Their Applications
Pages	99-104
Number of pages	6
ISBN (Print)	9781510828964
Publication status	Published - 2016
Event	International Conference on Computer Applications in Industry and Engineering - Duration: 26 Sept 2016 → …

Conference

Conference	International Conference on Computer Applications in Industry and Engineering
Period	26/09/16 → …

Keywords

access control
computer security
logic programming

Cite this

@inproceedings{fea11fecdee3411995d6f4e5af6a8853,

title = "A prototype development of a declarative approach for computer system security",

abstract = "In information security, representation and reasoning of authorization policy has been a key research topic in this field especially in a sophisticated information sharing and exchange environment [6, 7, 9]. In such a scenario, an user's request to access the system may not be able to decide straightaway, it may initiate a sequence of complex executions of authorization commands in order to determine either to grant or deny such a request. Becker and Nanz's logic of State-Modifying Policies (SMP) is a formal system addressing such problem in access control. In this paper, we provide a declarative semantics for SMP through a translation from SMP to Answer Set Programming (ASP) and propose a system prototype to implement our approach. Our experimental results show that our ASP implementation for SMP reasoning is effective to deal with real world problem domains.",

keywords = "access control, computer security, logic programming",

author = "Yun Bai and Edward Caprin and Yan Zhang",

year = "2016",

language = "English",

isbn = "9781510828964",

pages = "99--104",

booktitle = "Proceedings of the 29th International Conference on Computer Applications in Industry and Engineering, (CAINE 2016), Denver, Colorado, USA, 26-28 September 2016",

publisher = "The International Society for Computers and Their Applications",

note = "International Conference on Computer Applications in Industry and Engineering ; Conference date: 26-09-2016",

}

Bai, Y, Caprin, E & Zhang, Y 2016, A prototype development of a declarative approach for computer system security. in Proceedings of the 29th International Conference on Computer Applications in Industry and Engineering, (CAINE 2016), Denver, Colorado, USA, 26-28 September 2016. The International Society for Computers and Their Applications, pp. 99-104, International Conference on Computer Applications in Industry and Engineering, 26/09/16.

A prototype development of a declarative approach for computer system security. / Bai, Yun; Caprin, Edward; Zhang, Yan.
Proceedings of the 29th International Conference on Computer Applications in Industry and Engineering, (CAINE 2016), Denver, Colorado, USA, 26-28 September 2016. The International Society for Computers and Their Applications, 2016. p. 99-104.

Research output: Chapter in Book / Conference Paper › Conference Paper › peer-review

TY - GEN

T1 - A prototype development of a declarative approach for computer system security

AU - Bai, Yun

AU - Caprin, Edward

AU - Zhang, Yan

PY - 2016

Y1 - 2016

N2 - In information security, representation and reasoning of authorization policy has been a key research topic in this field especially in a sophisticated information sharing and exchange environment [6, 7, 9]. In such a scenario, an user's request to access the system may not be able to decide straightaway, it may initiate a sequence of complex executions of authorization commands in order to determine either to grant or deny such a request. Becker and Nanz's logic of State-Modifying Policies (SMP) is a formal system addressing such problem in access control. In this paper, we provide a declarative semantics for SMP through a translation from SMP to Answer Set Programming (ASP) and propose a system prototype to implement our approach. Our experimental results show that our ASP implementation for SMP reasoning is effective to deal with real world problem domains.

AB - In information security, representation and reasoning of authorization policy has been a key research topic in this field especially in a sophisticated information sharing and exchange environment [6, 7, 9]. In such a scenario, an user's request to access the system may not be able to decide straightaway, it may initiate a sequence of complex executions of authorization commands in order to determine either to grant or deny such a request. Becker and Nanz's logic of State-Modifying Policies (SMP) is a formal system addressing such problem in access control. In this paper, we provide a declarative semantics for SMP through a translation from SMP to Answer Set Programming (ASP) and propose a system prototype to implement our approach. Our experimental results show that our ASP implementation for SMP reasoning is effective to deal with real world problem domains.

KW - access control

KW - computer security

KW - logic programming

UR - http://handle.westernsydney.edu.au:8081/1959.7/uws:38147

M3 - Conference Paper

SN - 9781510828964

SP - 99

EP - 104

BT - Proceedings of the 29th International Conference on Computer Applications in Industry and Engineering, (CAINE 2016), Denver, Colorado, USA, 26-28 September 2016

PB - The International Society for Computers and Their Applications

T2 - International Conference on Computer Applications in Industry and Engineering

Y2 - 26 September 2016

ER -

A prototype development of a declarative approach for computer system security

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this