Policy Description Language for Dynamic Access Control Models

Recently, dynamic access control models are proposed to restrict access domain appropriately in multi-layered defense. However, policy description languages proposed so far can not express the models effectively in proper granularity. In this paper, we propose a policy description language which can designate precise condition for access control by using dynamic status of application process. Using the proposed language, we compose the policy of SELinux which is major implementation achieving multi-layered defense and confirm the advantages of the proposed language by evaluating the response and the expressiveness.