Incremental update of constraint-compliant policy rules

Bottoni, P., Fish, Andrew and Parisi-Presicce, F. (2010) Incremental update of constraint-compliant policy rules Electronic Communications of the EASST, 39. pp. 1-18. ISSN 1863-2122

651-1983-1-PB (2).pdf - Published Version

Download (922kB) | Preview


Organizations typically define policies to describe (positive or negative) requirements about strategic objectives. Examples are policies relative to the security of information systems in general or to the control of access to an organization’s resources. Often, the form used to specify policies is in terms of general constraints (what and why) to be enforced via the use of rules (how and when). The consistency of the rule system (transforming valid states into valid states) can be compromised and rules can violate some constraints when constraints are updated due to changing requirements. Here, we explore a number of issues related to constraint update, in particular proposing a systematic way to update rules as a consequence of modifications of constraints, by identifying which components of the rule have to be updated. Moreover, we show the construction of sets of rules, directly derived from a positive constraint, to guarantee constraint preservation and constraint enforcement.

Item Type: Journal article
Subjects: G000 Computing and Mathematical Sciences > G400 Computing
Faculties: Faculty of Science and Engineering > School of Computing, Engineering and Mathematics > Visual Modelling
Depositing User: editor cmis
Date Deposited: 31 May 2011 16:21
Last Modified: 04 Jun 2015 11:04

Actions (login required)

View Item View Item


Downloads per month over past year