An Algebraic Basis for Specifying and Enforcing Access Control in Security Systems

Security services in a multi-user environment are often based on access control mechanisms. Static of an access control policy can be formalised using abstract algebraic models. We integrate these static aspects into a dynamic framework considering requesting access to resources as a process aiming at the prevention of access control violations when a program is executed. We use another algebraic technique, monads, as a meta-language to integrate access control operations into a functional programming language. The integration of monads and concepts from a denotational model for process algebras provides a framework for programming of access control in security systems.

• Type: Conference
• Year: 2000
• Where: IWFM
• Authors: Claus Pahl
• Keywords: Access Control, Access Control Mechanisms, Access Control Policy, IWFM 2000, IWFM 2001