Reasoning for incomplete authorizations

Yun Bai; Robert J. Howlett; Ignac Lovrek; Lakhmi C. Jain

Reasoning for incomplete authorizations

Yun Bai, Robert J. Howlett, Ignac Lovrek, Lakhmi C. Jain

School of Computer, Data & Mathematical Sciences

Research output: Chapter in Book / Conference Paper › Conference Paper

Abstract

Authorization plays an important role to control access to the system resources. It enforces security mechanism in compliance with the policies and rules specified by the security strategies. However, the security rules may not be always complete. In certain situations, we need to evaluate and reason about an incomplete security domain. In this paper, we propose an approach to reason under incomplete security domain by extended logic programs, discuss properties of unknown and conflict queries, and solve these problems by defining a procedure of evaluating the logic programs.

Original language	English
Title of host publication	Proceedings of the 12th International Conference on Knowledge-Based Intelligent Information & Engineering Systems: KES 2008, held in Zagreb, Croatia, 3-5 September, 2008
Publisher	Springer
Number of pages	8
ISBN (Print)	9783540855620
Publication status	Published - 2008
Event	International Conference on Knowledge-Based and Intelligent Information and Engineering Systems - Duration: 1 Jan 2008 → …

Conference

Conference	International Conference on Knowledge-Based and Intelligent Information and Engineering Systems
Period	1/01/08 → …

Keywords

computer security
authorization
access control
logic programming
database security

Cite this

@inproceedings{1f7026846f7e46b8beca11036c65deb7,

title = "Reasoning for incomplete authorizations",

abstract = "Authorization plays an important role to control access to the system resources. It enforces security mechanism in compliance with the policies and rules specified by the security strategies. However, the security rules may not be always complete. In certain situations, we need to evaluate and reason about an incomplete security domain. In this paper, we propose an approach to reason under incomplete security domain by extended logic programs, discuss properties of unknown and conflict queries, and solve these problems by defining a procedure of evaluating the logic programs.",

keywords = "computer security, authorization, access control, logic programming, database security",

author = "Yun Bai and Howlett, {Robert J.} and Ignac Lovrek and Jain, {Lakhmi C.}",

year = "2008",

language = "English",

isbn = "9783540855620",

booktitle = "Proceedings of the 12th International Conference on Knowledge-Based Intelligent Information & Engineering Systems: KES 2008, held in Zagreb, Croatia, 3-5 September, 2008",

publisher = "Springer",

note = "International Conference on Knowledge-Based and Intelligent Information and Engineering Systems ; Conference date: 01-01-2008",

}

Bai, Y, Howlett, RJ, Lovrek, I & Jain, LC 2008, Reasoning for incomplete authorizations. in Proceedings of the 12th International Conference on Knowledge-Based Intelligent Information & Engineering Systems: KES 2008, held in Zagreb, Croatia, 3-5 September, 2008. Springer, International Conference on Knowledge-Based and Intelligent Information and Engineering Systems, 1/01/08.

TY - GEN

T1 - Reasoning for incomplete authorizations

AU - Bai, Yun

AU - Howlett, Robert J.

AU - Lovrek, Ignac

AU - Jain, Lakhmi C.

PY - 2008

Y1 - 2008

N2 - Authorization plays an important role to control access to the system resources. It enforces security mechanism in compliance with the policies and rules specified by the security strategies. However, the security rules may not be always complete. In certain situations, we need to evaluate and reason about an incomplete security domain. In this paper, we propose an approach to reason under incomplete security domain by extended logic programs, discuss properties of unknown and conflict queries, and solve these problems by defining a procedure of evaluating the logic programs.

AB - Authorization plays an important role to control access to the system resources. It enforces security mechanism in compliance with the policies and rules specified by the security strategies. However, the security rules may not be always complete. In certain situations, we need to evaluate and reason about an incomplete security domain. In this paper, we propose an approach to reason under incomplete security domain by extended logic programs, discuss properties of unknown and conflict queries, and solve these problems by defining a procedure of evaluating the logic programs.

KW - computer security

KW - authorization

KW - access control

KW - logic programming

KW - database security

UR - http://handle.uws.edu.au:8081/1959.7/45276

M3 - Conference Paper

SN - 9783540855620

BT - Proceedings of the 12th International Conference on Knowledge-Based Intelligent Information & Engineering Systems: KES 2008, held in Zagreb, Croatia, 3-5 September, 2008

PB - Springer

T2 - International Conference on Knowledge-Based and Intelligent Information and Engineering Systems

Y2 - 1 January 2008

ER -

Reasoning for incomplete authorizations

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this