Access Control, Security, and Trust: A Logical Approach

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9781584888628 | 1584888628
Cover: Hardcover
Copyright: 7/26/2010

Rent

(Recommended)

$87.67

Term

Due

Price

Semester

Dec 13

$92.29

Quarter

Aug 16

$87.67

Short Term

Jul 4

$83.06

*This item is part of an exclusive publisher rental program and requires an additional convenience fee. This fee will be reflected in the shopping cart.
Buy Used

Usually Ships in 2-4 Business Days

$109.76
Buy New

Usually Ships in 3-5 Business Days

$147.09
eBook

Available Instantly

Online: 180 Days

Downloadable: 180 Days

$86.63

Using propositional modal logic to explain access control principles, this workprovides the mathematical means to comprehend, analyze, create and verify the policies and control mechanisms used to protect resources. It starts with a preliminary introduction and then covers distributed access control, resources and sharing, and security monitors, the latter of which serves as a bridge to classical security models. While structured as a text for advanced undergraduates and graduate students, the book also meets the reference needs of those computer engineers, computer scientists, and information technologists responsible for designing, implementing, and verifying computer and information systems.

List of Tables	p. xiii
List of Figures	p. xv
Preface	p. xix
Access Control, Security, Trust, and Logic	p. 1
Deconstructing Access-Control Decisions	p. 3
A Logical Approach to Access Control	p. 6
Preliminaries	p. 9
A Language for Access Control	p. 11
Sets and Relations	p. 11
Notation	p. 12
Approaches for Mathematical Proofs	p. 13
Syntax	p. 15
Principal Expressions	p. 17
Access-Control Statements	p. 18
Well-Formed Formulas	p. 20
Semantics	p. 22
Kripke Structures	p. 23
Semantics of the Logic	p. 28
Summary	p. 37
Further Reading	p. 37
Reasoning about Access Control	p. 39
Logical Rules	p. 39
The Taut Rule	p. 41
The Modus Ponens Rule	p. 42
The Says Rule	p. 42
The MP Says Rule	p. 42
The Speaks For Rule	p. 43
The & Says and Quoting Rules	p. 43
Properties of →	p. 43
The Equivalence Rule	p. 45
The Controls Definition	p. 46
Formal Proofs and Theorems	p. 47
Soundness of Logical Rules	p. 50
Summary	p. 54
Further Reading	p. 54
Basic Concepts	p. 57
Reference Monitors	p. 57
Access-Control Mechanisms: Tickets and Lists	p. 60
Tickets	p. 61
Lists	p. 63
Logical and Pragmatic Implications	p. 66
Authentication	p. 68
Two-Factor Authentication	p. 68
Using Credentials from Other Authorities	p. 70
Groups	p. 74
Summary	p. 75
Further Reading	p. 76
Security Policies	p. 77
Confidentiality, Integrity, and Availability	p. 77
Discretionary Security Policies	p. 79
Mandatory Security Policies	p. 81
Military Security Policies	p. 85
Extending the Logic with Security levels	p. 85
Expressing Military Security Policies	p. 87
Military Security Policies: An Extended Example	p. 90
Commercial Policies	p. 94
Extending the Logic with Integrity Levels	p. 95
Protecting Integrity	p. 97
Strict Integrity	p. 98
An Extended Example of a Strict Integrity Policy	p. 100
Summary	p. 105
Further Reading	p. 105
Distributed Access Control	p. 107
Digital Authentication	p. 109
Public-Key Cryptography	p. 109
Efficiency Mechanisms	p. 112
Cryptographic Hash Functions	p. 112
Data-Encryption Keys	p. 113
Digital Signatures	p. 113
Reasoning about Cryptographic Communications	p. 114
Certificates, Certificate Authorities, and Trust	p. 116
Symmetric-Key Cryptography	p. 125
Summary	p. 131
Further Reading	p. 131
Delegation	p. 133
Simple Delegations	p. 133
Delegation and Its Properties	p. 135
A Delegation Example: Simple Checking	p. 141
Formal Definitions of Checks	p. 142
Bank Policies on Checks	p. 143
Operating Rules for Checks	p. 144
Summary	p. 147
Further Reading	p. 147
Networks: Case Studies	p. 149
SSL and TLS: Authentication across the Web	p. 149
Handshake Protocol	p. 150
Record Protocol	p. 155
Kerberos: Authentication for Distributed Systems	p. 157
Initial Authentication Requests	p. 157
Requests for Service-Specific Tickets	p. 159
Requests for Services	p. 161
Proxiable Tickets	p. 162
Financial Networks	p. 166
Electronic Clearinghouses	p. 166
Bank Authorities, Jurisdiction, and Policies	p. 169
Bank Operating Rules	p. 170
Summary	p. 172
Further Reading	p. 173
Isolation and Sharing	p. 175
A Primer on Computer Hardware	p. 177
Ones and Zeros	p. 177
Synchronous Design	p. 178
Synchronous Registers	p. 178
Registers with Load Control	p. 179
Registers with Tri-State Outputs	p. 179
Combinational Logic and Functions	p. 182
Arithmetic Logic Units	p. 184
Microcode	p. 190
Data Paths and Control Paths	p. 190
Microprogramming	p. 192
Summary	p. 193
Further Reading	p. 195
Virtual Machines and Memory Protection	p. 197
A Simple Processor	p. 198
Processor Components	p. 199
Machine Instructions	p. 201
Processors with Memory Segmentation	p. 204
Segmentation Using a Relocation Register	p. 204
Processor State and Instructions	p. 207
Program Status Word	p. 207
Traps	p. 208
Controlling Access to Memory and Segmentation Registers	p. 209
Access to Program Memory	p. 210
Implementation Details	p. 212
Access to the Relocation Register	p. 213
Setting the Mode Bit	p. 215
Design of the Virtual Machine Monitor	p. 217
Privileged Instructions	p. 220
Sensitive Instructions	p. 221
Virtualizable Processor Architectures	p. 223
Summary	p. 224
Further Reading	p. 225
Access Control Using Descriptors and Capabilities	p. 227
Address Descriptors and Capabilities	p. 227
Tagged Architectures	p. 231
Capability Systems	p. 233
Catalogs	p. 233
Creating New Segments	p. 235
Dynamic Sharing	p. 237
Revocation of Capabilities	p. 239
Summary	p. 241
Further Reading	p. 242
Access Control Using Lists and Rings	p. 245
Generalized Addresses	p. 245
Segment Access Controllers	p. 247
ACL-Based Access Policy for Memory Accesses	p. 249
Ring-Based Access Control	p. 253
Access Brackets	p. 254
Call Brackets	p. 255
Summary	p. 258
Further Reading	p. 259
Access Policies	p. 261
Confidentiality and Integrity Policies	p. 263
Classifications and Categories	p. 263
Bell-La Padula Model, Revisited	p. 266
Confidentiality levels: Some Practical Considerations	p. 269
Biba's Strict Integrity, Revisited	p. 272
Lipner's Integrity Model	p. 276
Commercial Integrity Requirements	p. 277
Commercial Integrity via Bell-La Padula	p. 277
Commercial Integrity via Bell-La Padula and Strict Integrity	p. 281
Summary	p. 285
Further Reading	p. 285
Role-Based Access Control	p. 289
RBAC Fundamentals	p. 289
Role Inheritance	p. 290
Sessions	p. 295
Separation of Duty	p. 297
Static Separation of Duty	p. 297
Dynamic Separation of Duty	p. 299
Representing RBAC Systems in the Logic	p. 304
RBAC Extensions to the Logic	p. 304
Translating RBAC into the Logic	p. 305
Summary	p. 310
Further Reading	p. 312
Summary of the Access-Control Logic	p. 313
Syntax	p. 313
Core Rules, Derived Rules, and Extensions	p. 315
Bibliography	p. 321
Notation Index	p. 324
General Index	p. 325
Table of Contents provided by Ingram. All Rights Reserved.

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Access Control, Security, and Trust: A Logical Approach

Summary

Table of Contents

Supplemental Materials