论文信息 - Logic Program for Authorizations

Logic Program for Authorizations

As a security mechanism, authorization is to provide access control to the system resources according to the polices and rules specified by the security strategies. Either by update or in the initial specification, conflicts in authorization is an issue needs to be solved. In this paper, we propose a new approach to solve conflict by using prioritized logic programs and discuss the uniqueness of its answer set. Addressing conflict resolution from logic programming viewpoint and the uniqueness analysis of the answer set provide a novel, efficient approach for authorization conflict resolution. Keywords— authorization, formal specification, conflict resolution, prioritized logic program.

Y. Bai

[1] V. Lifschitz,et al. The Stable Model Semantics for Logic Programming , 1988, ICLP/SLP.

[2] Simon S. Lam,et al. Authorization in distributed systems: a formal approach , 1992, Proceedings 1992 IEEE Computer Society Symposium on Research in Security and Privacy.

[3] Jorge Lobo,et al. A Logic Programming Approach to Conflict Resolution in Policy Management , 2000, KR.

[4] Elisa Bertino,et al. A Logic-Based Approach for Enforcing Access Control , 2000, J. Comput. Secur..

[5] Sushil Jajodia,et al. Flexible support for multiple access control policies , 2001, TODS.

[6] autoepistemic Zogic. Logic programming and negation : a survey , 2001 .

[7] Yan Zhang,et al. The Characterization on the Uniqueness of Answer Set for Prioritized Logic Programs , 2003, ISMIS.

[8] Joan Feigenbaum,et al. Delegation logic: A logic-based approach to distributed authorization , 2003, TSEC.

[9] E. Bertino,et al. A logical framework for reasoning about access control models , 2003, TSEC.

[10] Yan Zhang,et al. A Logic Based Approach for Dynamic Access Control , 2004, Australian Conference on Artificial Intelligence.

[11] Michael Gelfond,et al. Classical negation in logic programs and disjunctive databases , 1991, New Generation Computing.