Loading...
Please wait, while we are loading the content...
Similar Documents
Declarative Reconfigurable Trust Management
| Content Provider | CiteSeerX |
|---|---|
| Author | Marczak, William R. Zhou, Wenchao Loo, Boon Thau Zook, David Aref, Molham |
| Abstract | In recent years, there has been a proliferation of declarative logic-based trust management languages and systems proposed to ease the description, configuration, and enforcement of security policies. These systems have different tradeoffs in expressiveness and complexity, depending on the security constructs (e.g. authentication, delegation, secrecy, etc.) that are supported, and the assumed trust level and scale of the execution environment. In this paper, we present LBTrust, a unified declarative system for reconfigurable trust management, where various security constructs can be customized and composed in a declarative fashion. We present an initial proof-of-concept implementation of LBTrust using LogicBlox, an emerging commercial Datalog-based platform for enterprise software systems. The LogicBlox language enhances Datalog in a variety of ways, including constraints and meta-programming, as well as support for programmerdefined constraints on the meta-model itself – meta-constraints – which act to restrict the set of allowable programs. LB-Trust utilizes LogicBlox’s meta-programming and meta-constraints to enable customizable cryptographic, partitioning and distribution strategies based on the execution environment. We present use cases of LBTrust based on three trust management systems (Binder, D1LP, and Secure Network Datalog), and provide a preliminary evaluation of a Binder-based trust management system. 1. |
| File Format | |
| Access Restriction | Open |
| Subject Keyword | Declarative Fashion Security Construct Execution Environment Enterprise Software System Programmerdefined Constraint Declarative Logic-based Trust Management Language Commercial Datalog-based Platform Trust Management System Distribution Strategy Present Use Case Lb-trust Utilizes Logicblox Present Lbtrust Binder-based Trust Management System Unified Declarative System Different Tradeoff Security Policy Preliminary Evaluation Allowable Program Logicblox Language Enhances Datalog Secure Network Datalog Reconfigurable Trust Management Assumed Trust Level Initial Proof-of-concept Implementation Various Security Construct |
| Content Type | Text |
