Aggregation and Separation as Noninterference Properties

Article type: Research Article

Authors: Foley, Simon N.

Affiliations: Computer Science Department, University College, Cork, Ireland, Electronic Mail: simon@security.ucc.ie

Abstract: This paper proposes a notation that can be used to describe information flow policies that may have transitivity, aggregation and separation (of duty) exceptions. Operators for comparing, composing and abstracting these policies are described. These allow complex policies to be built from simpler policies. A formal semantics is given based on the notion of noninterference for deterministic systems. An unwinding of this definition is developed that can be used for any policy that does not contain a separation exception.

DOI: 10.3233/JCS-1992-1203

Journal: Journal of Computer Security, vol. 1, no. 2, pp. 159-188, 1992