Copyright © 2007 Elsevier B.V. All rights reserved.
An End-To-End Approach to Distributed Policy Language Implementation (Extended Abstract)
Available online 29 June 2007.
References and further reading may be available for this article. To view references and further reading you must purchase this article.
Abstract
Language-based security approaches to access control and information flow control must at some point rely on a language for expressing policies. However there will in general be several choices for the correct policy language for any given application, and several choices for the implementation of a policy language in a given domain. This article considers an approach to implementing the policy language at the application level, relying on trusted cryptographic libraries whose interface security guarantees are used to verify the correctness of the policy language implementation.
Keywords: Access control; policy language; cryptographic libraries; abstract data types






E-mail Article
Add to my Quick Links

Cited By in Scopus (0)





