The Logic of XACML - Extended
Cryptography and Security
2011-10-18 v1 Logic in Computer Science
Abstract
We study the international standard XACML 3.0 for describing security access control policy in a compositional way. Our main contribution is to derive a logic that precisely captures the idea behind the standard and to formally define the semantics of the policy combining algorithms of XACML. To guard against modelling artefacts we provide an alternative way of characterizing the policy combining algorithms and we formally prove the equivalence of these approaches. This allows us to pinpoint the shortcoming of previous approaches to formalization based either on Belnap logic or on D-algebra.
Keywords
Cite
@article{arxiv.1110.3706,
title = {The Logic of XACML - Extended},
author = {Carroline Dewi Puspa Kencana Ramli and Hanne Riis Nielson and Flemming Nielson},
journal= {arXiv preprint arXiv:1110.3706},
year = {2011}
}
Comments
Extended paper from The Logic of XACML, presented in FACS 2011 (8th International Symposium on Formal Aspects of Component Software)