Dissemin is shutting down on January 1st, 2025

Published in

Elsevier, Journal of Computational Science, 4(5), p. 653-663, 2014

DOI: 10.1016/j.jocs.2014.02.009

Links

Tools

Export citation

Search in Google Scholar

Assuring Consistency in Mixed Models

Journal article published in 2014 by Ramzi A. Haraty ORCID, Mirna F. Naous ORCID, Azzam Mourad ORCID
This paper is available in a repository.
This paper is available in a repository.

Full text: Download

Green circle
Preprint: archiving allowed
Orange circle
Postprint: archiving restricted
Red circle
Published version: archiving forbidden
Data provided by SHERPA/RoMEO

Abstract

Information systems security defines three properties of information: confidentiality, integrity, and availability. These characteristics remain major concerns throughout the commercial and military industry. Ordinary users have taken these features as basis for their businesses. Furthermore, users may find it necessary to combine policies in order to protect their information in a suitable way. However, inconsistencies may arise as a result of implementing multiple secrecy and privacy models; and therefore, render these services unsecure. In this paper, we propose an approach to detect and report inconsistencies when choosing mixed models for integrity and security. It is based on specifying the policies in first order logic and applying formal analysis. We demonstrate the feasibility of our proposition by applying it to the Clark Wilson and Role Based Access Control models. We use the Alloy language and analyzer to formalize the mixed model and check for any inconsistencies.