Privacy APIs: Access Control Techniques to Analyze and Verify Legal Privacy Policies

Authors:
Michael J. May;Carl A. Gunter;Insup Lee
Affiliations:
University of Pennsylvania, USA;University of Illinois Urbana-Champaign, USA;University of Pennsylvania, USA
Venue:
CSFW '06 Proceedings of the 19th IEEE workshop on Computer Security Foundations
Year:
2006

Citing 0
Cited 30

PolicyMorph: interactive policy transformations for a logical attribute-based access control framework

Proceedings of the 12th ACM symposium on Access control models and technologies
Stale-safe security properties for group-based secure information sharing

Proceedings of the 6th ACM workshop on Formal methods in security engineering
Why Eliciting and Managing Legal Requirements Is Hard

RELAW '08 Proceedings of the 2008 Requirements Engineering and Law
Toward practical analysis for trust management policy

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
A Formal Privacy Management Framework

Formal Aspects in Security and Trust
A Formalization of HIPAA for a Medical Messaging System

TrustBus '09 Proceedings of the 6th International Conference on Trust, Privacy and Security in Digital Business
Toward practical authorization-dependent user obligation systems

ASIACCS '10 Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security
Prioritizing Legal Requirements

RELAW '09 Proceedings of the 2009 Second International Workshop on Requirements Engineering and Law
Experiences in the logical specification of the HIPAA and GLBA privacy laws

Proceedings of the 9th annual ACM workshop on Privacy in the electronic society
Privacy policies with modal logic: the dynamic turn

DEON'10 Proceedings of the 10th international conference on Deontic logic in computer science
The production rule framework: developing a canonical set of software requirements for compliance with law

Proceedings of the 1st ACM International Health Informatics Symposium
A framework to support alignment of secure software engineering with legal regulations

Software and Systems Modeling (SoSyM)
Managing multi-jurisdictional requirements in the cloud: towards a computational legal landscape

Proceedings of the 3rd ACM workshop on Cloud computing security workshop
Policy auditing over incomplete logs: theory, implementation and applications

Proceedings of the 18th ACM conference on Computer and communications security
UCONLEGAL: a usage control model for HIPAA

Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium
Declarative privacy policy: finite models and attribute-based encryption

Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium
Towards HIPAA-compliant healthcare systems

Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium
Understanding and protecting privacy: formal semantics and principled audit mechanisms

ICISS'11 Proceedings of the 7th international conference on Information Systems Security
Refinement checking for privacy policies

Science of Computer Programming
Ensuring authorization privileges for cascading user obligations

Proceedings of the 17th ACM symposium on Access Control Models and Technologies
A dynamic logic for privacy compliance

Artificial Intelligence and Law - Special issue on Deontic Logic and Normative Systems
On XACML's adequacy to specify and to enforce HIPAA

HealthSec'12 Proceedings of the 3rd USENIX conference on Health Security and Privacy
Obligations and their interaction with programs

ESORICS'07 Proceedings of the 12th European conference on Research in Computer Security
Leveraging actors for privacy compliance

Proceedings of the 2nd edition on Programming systems, languages and applications based on actors, agents, and decentralized control abstractions
Capturing variability of law with nómos 2

ER'12 Proceedings of the 31st international conference on Conceptual Modeling
Privacy by design: a formal framework for the analysis of architectural choices

Proceedings of the third ACM conference on Data and application security and privacy
Privacy promises that can be kept: a policy analysis method with application to the HIPAA privacy rule

Proceedings of the 18th ACM symposium on Access control models and technologies
A framework to support selection of cloud providers based on security and privacy requirements

Journal of Systems and Software
A privacy framework for the personal web

The Personal Web
Formal verification of security properties in trust management policy

Journal of Computer Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper studies observational determinism, a generalisation of non-interference for multi-threaded programs. Standard notions of non-interference only consider input and output of programs, but to ensure the security of multithreaded programs, one ...