The Anatomy and Facets of Dynamic Policies. Broberg, N., van Delft, B., & Sands, D. In Proceedings of the 28th IEEE Computer Security Foundations Symposium, pages 122--136, 2015. IEEE Computer Society.
The Anatomy and Facets of Dynamic Policies [pdf]Paper  abstract   bibtex   
Information flow policies are often dynamic, the security concerns of a program will typically change during execution to reflect security-relevant events. A key challenge is how to best specify, and give proper meaning to, such dynamic policies. A large number of approaches exist that tackle that challenge, each yielding some important, but unconnected, insight. In this work we synthesise existing knowledge on dynamic policies, with an aim to establish a common terminology, best practices, and frameworks for reasoning about them. We introduce the concept of facets to illuminate subtleties in the semantics of policies, and closely examine the anatomy of policies and the expressiveness of policy specification mechanisms. We further explore the relation between dynamic policies and the concept of declassification.

Downloads: 0