1
$\begingroup$

What is the best way to describe the semantics of a new access control model?. I heard the temporal logic is the way to go. Is it true?

$\endgroup$
  • 4
    $\begingroup$ I'm not an expert, can you define what "a new access control model" is (or add some references)? This site is for research level questions (see FAQ for more details), so we hope that you already know well papers like this and this :) $\endgroup$ – Marzio De Biasi Oct 22 '12 at 13:10
  • $\begingroup$ @MarzioDeBiasi Hi, thanks. Yes I know about access controls and their related papers. Question here is: What is the best formal way to define the semantics of an access control model? Is it linear temporal logic or am I barking under a wrong tree?. $\endgroup$ – asghar ashgari Oct 22 '12 at 16:14
  • 1
    $\begingroup$ @asgharashgari: If the access control model has temporal aspects in it, then temporal logic is the way to go. Martin Abadi (among others) has done research on formal/logical models of access control. Google it. $\endgroup$ – Dave Clarke Oct 23 '12 at 14:19
1
$\begingroup$

There were a lot of publication on extending and or formalizing RBAC/SOD with LTL or other flavors of temporal logics, not sure of other AC models. Google Scholar (or simple google) search with yield a bunch of articles. Most of them might be not sufficiently formal for somebody like yourself, yet might be of some interest. Not sure is LTL the best way. Yet for a hammers everything is a nail, so if temporal logic is your specialty you might be more successful with it than without.. Consider also traditional programming language semantics approaches such as Z and alike, Game Theoretical/Modular/HyperProperties, dedicated logics. Totally depends on your AC.

Check example articles and see what you feel is the way https://www.sciencedirect.com/science/article/pii/S1571066109003107

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.