<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00425996</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-13T21:44:55+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Modeling and controlling downgrading operations in information systems</title>
            <author role="aut">
              <persName>
                <forename type="first">Julien</forename>
                <surname>Thomas</surname>
              </persName>
              <email type="md5">91aeefe2c2913b08f8723ad170bdc350</email>
              <email type="domain">telecom-bretagne.eu</email>
              <idno type="idhal" notation="numeric">864162</idno>
              <idno type="halauthorid" notation="string">45830-864162</idno>
              <orgName ref="#struct-301262"/>
              <affiliation ref="#struct-60070"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nora</forename>
                <surname>Cuppens-Boulahia</surname>
              </persName>
              <email type="md5">b604c661dd080ed359191e81b4685bfa</email>
              <email type="domain">telecom-bretagne.eu</email>
              <idno type="idhal" notation="numeric">863921</idno>
              <idno type="halauthorid" notation="string">420699-863921</idno>
              <orgName ref="#struct-301262"/>
              <affiliation ref="#struct-390277"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Frédéric</forename>
                <surname>Cuppens</surname>
              </persName>
              <email type="md5">cbfcb9e0c1bec1c973af82fb27da613e</email>
              <email type="domain">telecom-bretagne.eu</email>
              <idno type="idhal" notation="numeric">863922</idno>
              <idno type="halauthorid" notation="string">420462-863922</idno>
              <orgName ref="#struct-301262"/>
              <affiliation ref="#struct-390277"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Ex-Bibliothèque</forename>
                <surname>Télécom Bretagne (devenu IMT Atlantique)</surname>
              </persName>
              <email type="md5">1db35bce4a31c4f6d23fbf67e680f0f9</email>
              <email type="domain">imt-atlantique.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2009-10-23 09:46:43</date>
              <date type="whenModified">2026-01-23 09:12:06</date>
              <date type="whenReleased">2009-10-23 09:46:54</date>
              <date type="whenProduced">2009-11-29</date>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="142672">
                <persName>
                  <forename>Ex-Bibliothèque</forename>
                  <surname>Télécom Bretagne (devenu IMT Atlantique)</surname>
                </persName>
                <email type="md5">1db35bce4a31c4f6d23fbf67e680f0f9</email>
                <email type="domain">imt-atlantique.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00425996</idno>
            <idno type="halUri">https://hal.science/hal-00425996</idno>
            <idno type="halBibtex">thomas:hal-00425996</idno>
            <idno type="halRefHtml">&lt;i&gt;SITIS'09 : 5th International Conference on Signal-Image Technology &amp; Internet-based Systems&lt;/i&gt;, Nov 2009, Marrakech, Morocco</idno>
            <idno type="halRef">SITIS'09 : 5th International Conference on Signal-Image Technology &amp; Internet-based Systems, Nov 2009, Marrakech, Morocco</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-BREST">Université de Bretagne occidentale - Brest (UBO)</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="UNIV-UBS">Université de Bretagne Sud</idno>
            <idno type="stamp" n="TELECOM-BRETAGNE">Télécom Bretagne</idno>
            <idno type="stamp" n="LAB-STICC">Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance</idno>
            <idno type="stamp" n="LAB-STICC_TB" corresp="TELECOM-BRETAGNE">Publications Télécom Bretagne du Lab-STICC</idno>
            <idno type="stamp" n="IMTA_LUSSI">IMT Atlantique - Département logique des usages, sciences sociales et de l'Information</idno>
            <idno type="stamp" n="LAB-STICC_IMTA">Lab-STICC - IMT Atlantique</idno>
            <idno type="stamp" n="IMT-ATLANTIQUE" corresp="INSTITUT-MINES-TELECOM">IMT-ATLANTIQUE</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="IMTA_DSD">IMT Atlantique - Département de Science des Données</idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Modeling and controlling downgrading operations in information systems</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Julien</forename>
                    <surname>Thomas</surname>
                  </persName>
                  <email type="md5">91aeefe2c2913b08f8723ad170bdc350</email>
                  <email type="domain">telecom-bretagne.eu</email>
                  <idno type="idhal" notation="numeric">864162</idno>
                  <idno type="halauthorid" notation="string">45830-864162</idno>
                  <orgName ref="#struct-301262"/>
                  <affiliation ref="#struct-60070"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nora</forename>
                    <surname>Cuppens-Boulahia</surname>
                  </persName>
                  <email type="md5">b604c661dd080ed359191e81b4685bfa</email>
                  <email type="domain">telecom-bretagne.eu</email>
                  <idno type="idhal" notation="numeric">863921</idno>
                  <idno type="halauthorid" notation="string">420699-863921</idno>
                  <orgName ref="#struct-301262"/>
                  <affiliation ref="#struct-390277"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Frédéric</forename>
                    <surname>Cuppens</surname>
                  </persName>
                  <email type="md5">cbfcb9e0c1bec1c973af82fb27da613e</email>
                  <email type="domain">telecom-bretagne.eu</email>
                  <idno type="idhal" notation="numeric">863922</idno>
                  <idno type="halauthorid" notation="string">420462-863922</idno>
                  <orgName ref="#struct-301262"/>
                  <affiliation ref="#struct-390277"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">8703</idno>
                <meeting>
                  <title>SITIS'09 : 5th International Conference on Signal-Image Technology &amp; Internet-based Systems</title>
                  <date type="start">2009-11-29</date>
                  <date type="end">2009-12-04</date>
                  <settlement>Marrakech</settlement>
                  <country key="MA">Morocco</country>
                </meeting>
                <imprint>
                  <date type="datePub">2009</date>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Security model</term>
                <term xml:lang="en">B method</term>
                <term xml:lang="en">Downgrading</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In existing systems, information are protected by security models that control the accesses to the information, depending on their security level. In such systems, allowing accesses that were previously denied by diminishing the security level of the information is called downgrading. Controlling this downgrade of sensitive information is an important issue in computer security, as it requires the definition of formal security models able to express contextual authorisations for some information flows. In traditional security models, information downgrading is however most of the time not taken into account and must be managed by external systems. In some recent security models, information downgrading is defined, but for specific security policies, which limits the downgrading controls. In order to be able to express a generic information downgrading control, we present in this article a formalization of the different concepts of downgrading and we propose a model to specify and control downgrad operations. Contrary to existing downgrading models, our model relies on an abstract security policy in order to define downgrading controls that are not restricted to specific scenarios.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="department" xml:id="struct-60070" status="OLD">
          <orgName>Département Logique des Usages, Sciences sociales et Sciences de l'Information</orgName>
          <orgName type="acronym">LUSSI</orgName>
          <desc>
            <address>
              <addrLine>Technopôle Brest Iroise - CS 83818 - 29238 BREST Cedex 3</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-108091" type="direct"/>
            <relation active="#struct-301262" type="direct"/>
            <relation active="#struct-302102" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-390277" status="OLD">
          <orgName>Lab-STICC_TB_CID_SFIIS</orgName>
          <date type="end">2016-12-31</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-81533" type="direct"/>
            <relation active="#struct-108091" type="indirect"/>
            <relation active="#struct-172265" type="indirect"/>
            <relation active="#struct-300314" type="indirect"/>
            <relation active="#struct-301262" type="indirect"/>
            <relation active="#struct-301521" type="indirect"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="UMR3192" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-108091" status="OLD">
          <idno type="ROR">https://ror.org/033c46s90</idno>
          <orgName>Université européenne de Bretagne - European University of Brittany</orgName>
          <orgName type="acronym">UEB</orgName>
          <desc>
            <address>
              <addrLine>5 boulevard Laënnec - 35000 Rennes</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ueb.eu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-301262" status="OLD">
          <orgName>Télécom Bretagne</orgName>
          <date type="start">1977</date>
          <desc>
            <address>
              <addrLine>Technopôle Brest-IroiseCS 8381829238 BREST Cedex 3</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.telecom-bretagne.eu/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-81533" status="OLD">
          <orgName>Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance (UMR 3192)</orgName>
          <orgName type="acronym">Lab-STICC</orgName>
          <desc>
            <address>
              <addrLine>Technopole Brest Iroise BP 832 29285 BREST CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lab-sticc.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-108091" type="direct"/>
            <relation active="#struct-172265" type="direct"/>
            <relation active="#struct-300314" type="direct"/>
            <relation active="#struct-301262" type="direct"/>
            <relation active="#struct-301521" type="direct"/>
            <relation active="#struct-302102" type="direct"/>
            <relation name="UMR3192" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-172265" status="VALID">
          <idno type="IdRef">05017746X</idno>
          <idno type="ISNI">0000000121680285</idno>
          <idno type="ROR">https://ror.org/04ed7fw48</idno>
          <orgName>Université de Bretagne Sud</orgName>
          <orgName type="acronym">UBS</orgName>
          <date type="start">1995-02-07</date>
          <desc>
            <address>
              <addrLine>BP 92116 - 56321 Lorient cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-ubs.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-300314" status="VALID">
          <idno type="IdRef">291809022</idno>
          <idno type="ISNI">0000000121880893</idno>
          <idno type="ROR">https://ror.org/0372th171</idno>
          <orgName>Université de Brest</orgName>
          <orgName type="acronym">UBO EPE</orgName>
          <desc>
            <address>
              <addrLine>Université de Bretagne Occidentale - 3 Rue des Archives 29238, Brest</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-brest.fr/</ref>
          </desc>
        </org>
        <org type="regrouplaboratory" xml:id="struct-301521" status="VALID">
          <orgName>Institut Brestois du Numérique et des Mathématiques</orgName>
          <orgName type="acronym">IBNM</orgName>
          <desc>
            <address>
              <addrLine>Université de Brest - UBO3 Rue des Archives, 29238 Brest</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-brest.fr/menu/recherche-innovation/Laboratoires/Axe+Num%C3%A9rique-Math%C3%A9matiques/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300314" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>