Skip to Main content Skip to Navigation
Conference papers

Policy Composition based on Petri Nets

Hejiao Huang Helene Kirchner 1, 2 
1 PAREO - Formal islands: foundations and applications
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : Security policies are one of the most fundamental elements of computer security. For secure interoperation and sharing resources among heterogeneous systems, local policies should correspondingly be integrated for designing a global policy. This paper addresses the problem in a formal way. It uses extended Petri net process to specify and verify security policies in a modular way. It defines four types of policy compositions such that the integrated policy is capable of handling resources sharing, simultaneously executing operations and embedding sub-policies into main policies in multiple heterogeneous systems. Furthermore, the global policy can preserve the fundamental policy properties, i.e., completeness, termination, consistency and confluence, and satisfy policy autonomy and security principles that are required for secure interoperation.
Document type :
Conference papers
Complete list of metadata
Contributor : Helene Kirchner Connect in order to contact the contributor
Submitted on : Thursday, November 19, 2009 - 11:00:28 AM
Last modification on : Saturday, June 25, 2022 - 7:41:51 PM




Hejiao Huang, Helene Kirchner. Policy Composition based on Petri Nets. 33rd Annual IEEE International Computer Software and Applications Conference COMPSAC2009, Jul 2009, Seattle, United States. pp.416--421, ⟨10.1109/COMPSAC.2009.169⟩. ⟨inria-00433398⟩



Record views