A Formal Language for the Specification and Manipulation of Security Policies

摘要

Security plicies are playing important parts in the prac-tice of computer security such as authorization and access control. Over the past few decades, many security models have been proposed to accommodate different security re-quqirement in different computing systems. For some com-puting environments, the design of security policies and the implementation of access control can be based on a single security model. In some other situations, however, security policies and access control for a single system may have to be based on multiple security models. In this paper, we report a formal language in which security poli-cies based on different security models can be uniformly specified and manipulated.