Combining logics for modelling security policies

  • Authors:
  • Chuchang Liu;Patrick McLean;Maris A. Ozols

  • Affiliations:
  • Defence Science and Technology Organisation, Edinburgh, SA, Australia;Defence Science and Technology Organisation, Edinburgh, SA, Australia;Defence Science and Technology Organisation, Edinburgh, SA, Australia

  • Venue:
  • ACSC '05 Proceedings of the Twenty-eighth Australasian conference on Computer Science - Volume 38
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper considers a logical framework for modelling security policies for information systems. Epistemic, deontic and temporal logics can respectively be used to express what an agent knows or believes, what an agent is permitted or forbidden to know or do, and the dynamic progress of a system over time. In modelling a security policy for a practical system, one may need to combine these logical notions to express statements of the policy, so a combination of logics is considered. We investigate the issues regarding techniques for combining logics, approaches to formalizing security policies based on a combined logic, and strategies applied for reasoning about the security properties required to be satisfied by a policy. Several possible future research directions under this logical framework are discussed.