Logic based authorization program and its implementation

Authors:
Chun Ruan;Seyed Shahrestani
Affiliations:
University of Western Sydney, Penrith South, Australia;University of Western Sydney, Penrith South, Australia
Venue:
Proceedings of the 4th international conference on Security of information and networks
Year:
2011

Citing 9
Cited 0

A calculus for access control in distributed systems

ACM Transactions on Programming Languages and Systems (TOPLAS)
Unfounded sets and well-founded semantics for general logic programs

Proceedings of the seventh ACM SIGACT-SIGMOD-SIGART symposium on Principles of database systems
Delegation logic: A logic-based approach to distributed authorization

ACM Transactions on Information and System Security (TISSEC)
PBDM: a flexible delegation model in RBAC

Proceedings of the eighth ACM symposium on Access control models and technologies
Framework for role-based delegation models

ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
A Logical Framework for Reasoning on Data Access Control Policies

CSFW '99 Proceedings of the 12th IEEE workshop on Computer Security Foundations
Detecting Conflicts in a Role-Based Delegation Model

ACSAC '01 Proceedings of the 17th Annual Computer Security Applications Conference
A Logical Language for Expressing Authorizations

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
Reasoning on Weighted Delegatable Authorizations

DEXA '09 Proceedings of the 20th International Conference on Database and Expert Systems Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we describe a logic based authorization program and its implementation. Weighted Delegatable Authorization Program (WDAP) is a logic based framework supporting weighted authorizations and weighted administrative privilege delegations in a decentralised access control system. In this paper we describe various aspects about WDAP and show how it can be used to specify complex security policies. The access control policy is also given. The program Smodels is a widely used system that implements the answer set semantics for extended logic programs. We show how to use Smodels to implement WDAP.