University of Illinois Urbana-Champaign

A Trust Management Approach for Flexible Policy Management in Security-Typed Languages

Bandhakavi, Sruthi; Winsborough, William; Winslett, Marianne

Content Files
A Trust Management Approach for Flexible Policy Management in Security-Typed Languages.pdf

Permalink

https://hdl.handle.net/2142/11452

Description

Title
A Trust Management Approach for Flexible Policy Management in Security-Typed Languages
Author(s)
  • Bandhakavi, Sruthi
  • Winsborough, William
  • Winslett, Marianne
Issue Date
2008-05
Keyword(s)
computer security
Date of Ingest
2009-04-22T21:37:04Z
Abstract
Early work on security-typed languages required that legal information flows be defined statically. More recently, techniques have been introduced that relax these assumptions and allow policies to change at run-time. For example, the Rx language uses a policy language based on RT, a trust management framework for representing authorization policies. While Rx made significant strides toward the goal of allowing policy updates in security-typed languages, in this paper we observe that certain design choices of Rx violate the privacy and autonomy requirements of principals in trust management systems, thus making decentralized control over information difficult. To address these problems, we propose RTI, a new security-typed language. In addition to avoiding prior pitfalls, RTI's most distinguishing characteristic is that it supports fine-grained specification of security for dynamic policy. We also provide a proof of noninterference for RTI.
Type of Resource
text
Genre of Resource
Technical Report
Permalink
http://hdl.handle.net/2142/11452
Copyright and License Information
You are granted permission for the non-commercial reproduction, distribution, display, and performance of this technical report in any format, BUT this permission is only for a period of 45 (forty-five) days from the most recent time that you verified that this technical report is still available from the University of Illinois at Urbana-Champaign Computer Science Department under terms that include this permission. All other rights are reserved by the author(s).

Owning Collections

Research and Tech Reports - Computer Science PRIMARY