Modular Access Control via Strategic Rewriting - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2007

Modular Access Control via Strategic Rewriting


Security policies, in particular access control, are fundamental elements of computer security. We address the problem of authoring and analyzing policies in a modular way using techniques developed in the field of term rewriting, focusing especially on the use of rewriting strategies. Term rewriting supports a formalization of access control with a clear declarative semantics based on equational logic and an operational semantics guided by strategies. Well-established term rewriting techniques allow us to check properties of policies such as completeness and the absence of conflicts. A rich language for expressing rewriting strategies is used to define a theory of modular construction of policies in which we can better understand the preservation of properties of policies under composition. The robustness of the approach is illustrated on the composition operators of XACML.

Dates and versions

inria-00185697 , version 1 (06-11-2007)



Daniel J. Dougherty, Claude Kirchner, Hélène Kirchner, Anderson Santana de Oliveira. Modular Access Control via Strategic Rewriting. 12th European Symposium On Research In Computer Security - ESORICS 2007, Sep 2007, Dresden, Germany. pp.578-593, ⟨10.1007/978-3-540-74835-9_38⟩. ⟨inria-00185697⟩
73 View
0 Download



Gmail Facebook X LinkedIn More