Policy Composition based on Petri Nets - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2009

Policy Composition based on Petri Nets

Hejiao Huang
  • Function : Author
  • PersonId : 861301


Security policies are one of the most fundamental elements of computer security. For secure interoperation and sharing resources among heterogeneous systems, local policies should correspondingly be integrated for designing a global policy. This paper addresses the problem in a formal way. It uses extended Petri net process to specify and verify security policies in a modular way. It defines four types of policy compositions such that the integrated policy is capable of handling resources sharing, simultaneously executing operations and embedding sub-policies into main policies in multiple heterogeneous systems. Furthermore, the global policy can preserve the fundamental policy properties, i.e., completeness, termination, consistency and confluence, and satisfy policy autonomy and security principles that are required for secure interoperation.
No file

Dates and versions

inria-00433398 , version 1 (19-11-2009)



Hejiao Huang, Helene Kirchner. Policy Composition based on Petri Nets. 33rd Annual IEEE International Computer Software and Applications Conference COMPSAC2009, Jul 2009, Seattle, United States. pp.416--421, ⟨10.1109/COMPSAC.2009.169⟩. ⟨inria-00433398⟩
65 View
0 Download



Gmail Facebook X LinkedIn More