FASER (Formal and Automatic Security Enforcement by Rewriting) by BPA algebra with test. (1st January 2013)

• Record Type: Journal Article
• Authors: Sui, Guangye; Mejri, Mohamed
• Is Part Of: International journal of grid and utility computing. Volume 4:Number 2/3(2013)
• Page Start: 204
• Page End: 211
• Publication Date: 2013-01-01
• Subjects: formal method -- security enforcement -- program rewriting -- basic process algebra -- security policies -- information systems -- linear system; Electronic data processing -- Distributed processing -- Periodicals; Electronic commerce -- Management -- Computer programs -- Periodicals; 004.605
• Languages: English
• ISSNs: 1741-847X

Abstract

A correct and a cheap enforcement of security policies on information systems is a major problem for most of our institutions. In previous works, we introduced a program rewriting approach that can automatically and formally enforce security policies on untrusted programs. The program and the security policy are specified as processes in an extended version of BPA (Basic Process Algebra). After that, the enforcement problem is turned to the resolution of a linear system. In this paper, we extend the expressiveness of the algebra by adding tests which is an important step towards enforcing security policies on more real interesting systems.