Combining components and policies

Author

Dinolt, G.W. ; Benzinger, L.A. ; Yatabe, M.G.

Author_Institution

Secure Syst. R&D, Loral Western Dev. Labs., San Jose, CA, USA

fYear

1994

fDate

14-16 Jun 1994

Firstpage

22

Lastpage

33

Abstract

Several mathematical models have been developed which describe various kinds of composition for secure systems. These models can be complex and unsatisfactory in the sense that it is difficult for a system designer to determine exactly how to connect components together to achieve a particular (security) property. We provide a simple mathematical model which we use to describe security policies and components. The model provides a means for describing the combination of both components and policies and for showing whether combinations of components will satisfy specified policies. If the system designer can describe a system in the terms we present, then the designer can use these terms to analyze some of the security properties of the system

Keywords

data integrity; formal specification; security of data; set theory; data integrity; mathematical models; secure systems; security policies; security properties; system designer; Contracts; Lattices; Mathematical model; Production facilities; Safety; Security;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer Security Foundations Workshop VII, 1994. CSFW 7. Proceedings

Conference_Location

Franconia, NH

ISSN

1063-6900

Print_ISBN

0-8186-6230-1

Type

conf

DOI

10.1109/CSFW.1994.315950

Filename

315950