Modular Security Policy Design based on Extended Petri Nets - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year : 2009

Modular Security Policy Design based on Extended Petri Nets


Security policies are one of the most fundamental elements of computer security. Their design has to cope with composition of components in security systems and interactions between them. Consequently, a modular approach for specification and verification of security policies is necessary and the composition of modules must consistently ensure fundamental properties of security policies, in a rigorous and systematic way. This paper shows how to use extended Petri net process (EPNP) to specify and verify security policies in a modular way. It defines a few fundamental policy properties, namely completeness, termination, consistency and confluence, in Petri net terminology and relates them to classical notions. According to XACML combiners and to property preserving Petri net process algebra (PPPA), several policy composition operators are specified and property preserving results are stated for the policy correctness verification. The approach is illustrated on the design of a complex policy.
Fichier principal
Vignette du fichier
HAL.pdf (660.91 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00396924 , version 1 (19-06-2009)


  • HAL Id : inria-00396924 , version 1


Hejiao Huang, Helene Kirchner. Modular Security Policy Design based on Extended Petri Nets. 2009. ⟨inria-00396924⟩
157 View
116 Download


Gmail Facebook X LinkedIn More