• DocumentCode
    1727986
  • Title

    Using RuleML to specify cross-domain information flow control policies

  • Author

    Arvay, Randall J. ; Wijesekera, Duminda ; Michael, James Bret

  • Author_Institution
    Dept. of Comput. Sci., Naval Postgrad. Sch., Monterey, CA, USA
  • fYear
    2009
  • Firstpage
    1
  • Lastpage
    6
  • Abstract
    We use RuleML to write declassification policies that secure information exchanges between different security levels of disparate access control models. Such flows enable sharing task-critical information that would otherwise not be shared without human intervention. Using RuleML as a security policy specification language allows us to preserve the safety property of information flow across multiple security levels. We also provide a motivating example of our approach to dealing with this property, taken from the Maritime Domain Awareness domain.
  • Keywords
    authorisation; specification languages; RuleML; access control model; cross-domain information flow control policy; declassification policy; information exchange security; maritime domain awareness; security policy specification language; task-critical information; Access control; Computer science; Computer security; Humans; Information security; Multilevel systems; Observability; Service oriented architecture; Software safety; Specification languages; Cross-Domain; RuleML; security policy;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    System of Systems Engineering, 2009. SoSE 2009. IEEE International Conference on
  • Conference_Location
    Albuquerque, NM
  • Print_ISBN
    978-1-4244-4766-4
  • Electronic_ISBN
    978-1-4244-4767-1
  • Type

    conf

  • Filename
    5282339