Efficient and flexible access control via Jones-optimal logic program specialisation

  • Authors:
  • Steve Barker;Michael Leuschel;Mauricio Varea

  • Affiliations:
  • Department of Computer Science, King's College, London, UK WC2R 2LS;Institut für Informatik, Heinrich-Heine-Universität Düsseldorf, Düsseldorf, Germany 40225;School of Electronics and Computer Science, University of Southampton, Highfield, UK SO17 1BJ

  • Venue:
  • Higher-Order and Symbolic Computation
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

We describe the use of a flexible meta-interpreter for performing access control checks on deductive databases. The meta-program is implemented in Prolog and takes as input a database and an access policy specification. For processing access control requests we specialise the meta-program for a given access policy and database by using the logen partial evaluation system. The resulting specialised control checking program is dependent solely upon dynamic information that can only be known at the time of actual access request evaluation. In addition to describing our approach, we give a number of performance measures for our implementation of an access control checker. In particular, we show that by using our approach we get flexible access control with virtually no overhead, satisfying the Jones optimality criterion. The paper also shows how to satisfy the Jones optimality criterion more generally for interpreters written in the non-ground representation.