On Formal Specification and Analysis of Security Policies - Archive ouverte HAL Access content directly
Conference Papers Year : 2010

On Formal Specification and Analysis of Security Policies


Security policies are ubiquitous in information systems and more generally in the management of sensitive information. Access control policies are probably the most largely used policies but their application goes well beyond this application domain. The enforcement of security policies is useless if some of their key properties like the consistency, for example, cannot be stated and checked. We propose here a framework where the security policies and the systems they are applied on, are specified separately but using a common formalism. This separation allows us not only some analysis of the policy independently of the target system but also the application of a given policy on different systems. Besides the abstract formalism we also explore how rewrite and reduction systems can be used and combined in a rather systematic way to provide executable specifications for this framework. We also propose a notion of system and policy transformation that gives the possibility to study some properties which cannot be expressed only within the initial presentation. We have shown, in particular, how confidentiality, integrity and confinment can be expressed for the BLP policy that does not deal explicitly with information flows but only with objects containing tractable information.
Fichier principal
Vignette du fichier
article.pdf (277.1 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00429240 , version 1 (02-11-2009)
inria-00429240 , version 2 (01-06-2010)
inria-00429240 , version 3 (30-07-2010)


  • HAL Id : inria-00429240 , version 3


Tony Bourdier, Horatiu Cirstea, Mathieu Jaume, Hélène Kirchner. On Formal Specification and Analysis of Security Policies. 2010 Grande Region Security and Reliability Day, Mar 2010, Saarbrücken, Germany. ⟨inria-00429240v3⟩
152 View
226 Download


Gmail Facebook Twitter LinkedIn More