Incremental update of constraint-compliant policy rules

Bottoni, P., Fish, Andrew and Parisi-Presicce, F. (2010) Incremental update of constraint-compliant policy rules Electronic Communications of the EASST, 39. pp. 1-18. ISSN 1863-2122

[img]
Preview
Text
651-1983-1-PB (2).pdf - Published Version

Download (922kB) | Preview

Abstract

Organizations typically define policies to describe (positive or negative) requirements about strategic objectives. Examples are policies relative to the security of information systems in general or to the control of access to an organization’s resources. Often, the form used to specify policies is in terms of general constraints (what and why) to be enforced via the use of rules (how and when). The consistency of the rule system (transforming valid states into valid states) can be compromised and rules can violate some constraints when constraints are updated due to changing requirements. Here, we explore a number of issues related to constraint update, in particular proposing a systematic way to update rules as a consequence of modifications of constraints, by identifying which components of the rule have to be updated. Moreover, we show the construction of sets of rules, directly derived from a positive constraint, to guarantee constraint preservation and constraint enforcement.

Item Type: Journal article
Subjects: G000 Computing and Mathematical Sciences > G400 Computing
Faculties: Faculty of Science and Engineering > School of Computing, Engineering and Mathematics > Visual Modelling
Depositing User: editor cmis
Date Deposited: 31 May 2011 16:21
Last Modified: 04 Jun 2015 11:04
URI: http://eprints.brighton.ac.uk/id/eprint/8656

Actions (login required)

View Item View Item

Downloads

Downloads per month over past year