Rewriting and modularity for security policies

Abstract : In this thesis we address the modular specification and analysis of flexible, rule-based policies. We introduce the use of the strategic rewriting formalism in this domain, such that our framework inherits techniques, theorems, and tools from the rewriting theory. This allows us to easily state and verify important policy properties such as the absence of conflicts, for instance. Moreover, we develop rewrite-based methods to verify elaborate policy properties such as the safety problem in access control and the detection of information flows in mandatory policies. We show that strategies are important to preserve policy properties under composition. The rich strategy languages available in systems like Tom, Stratego, Maude, ASF+SDF and Elan allows us to define several kinds of policy combiners. Finally, in this thesis we provide a systematic methodology to enforce rewrite-based policies on existing applications through aspect-oriented programming. Policies are weaved into the existing code, resulting in programs that implement a reference monitor for the given policy. Reuse is improved since policies and programs can be maintained independently from each other.
Document type :
Theses
Complete list of metadatas

Cited literature [149 references]  Display  Hide  Download

https://hal.univ-lorraine.fr/tel-01748342
Contributor : Thèses Ul <>
Submitted on : Thursday, March 29, 2018 - 11:32:11 AM
Last modification on : Tuesday, April 24, 2018 - 1:53:22 PM
Long-term archiving on : Friday, September 14, 2018 - 9:11:36 AM

File

SCD_T_2008_0007_SANTANA-DE-OLI...
Files produced by the author(s)

Identifiers

  • HAL Id : tel-01748342, version 1

Collections

Citation

Anderson Santana de Oliveira. Rewriting and modularity for security policies. Other [cs.OH]. Université Henri Poincaré - Nancy 1, 2008. English. ⟨NNT : 2008NAN10007⟩. ⟨tel-01748342⟩

Share

Metrics

Record views

56

Files downloads

42