Abstract:A security policy states the acceptable actions of an information system, as the actions bear on security. There is a pressing need for organizations to declare their security policies, even informal statements would be better than the current practice. But, formal policy statements are preferable to support (1) reasoning about policies, e.g., for consistency and completeness, (2) automated enforcement of the policy, e.g., using wrappers around legacy systems or after the fact with an intrusion detection system, and (3) other formal manipulation of policies, e.g., the composition of policies. We present LaSCO, the Language for Security Constraints on Objects, in which a policy consists of two parts: the domain (assumptions about the system) and the requirement (what is allowed assuming the domain is satisfied). Thus policies defined in LaSCO have the appearance of conditional access control statements. LaSCO policies are specified as expressions in logic and as directed graphs, giving a visual view of policy. LaSCO has a simple semantics in first order logic (which we provide), thus permitting policies we write, even for complex policies, to be very perspicuous. LaSCO has syntax to express many of the situations we have found to be useful on policies or, more interesting, the composition of policies. LaSCO has an object-oriented structure, permitting it to be useful to describe policies on the objects and methods of an application written in an object-oriented language, in addition to the traditional policies on operating system objects. A LaSCO specification can be automatically translated into executable code that checks an invocation of a program with respect to a policy. The implementation of LaSCO is in Java, and generates wrappers to check Java programs with respect to a policy.

A Language for Secure Requirement Description Based on Information Flow

Verifying Secure Interface Composition for Component-Based System Designs

Enforcing Relaxed Declassifications with Reference Points

System-Level Defense against Indirect Prompt Injection Attacks: An Information Flow Control Perspective

A Semantic Security Policy Language for Distributed Computing Environment

A New Enforcement on Declassification with Reachability Analysis

Event-based Compositional Reasoning of Information-Flow Security for Concurrent Systems.

A Verified Capability-Based Model for Information Flow Security with Dynamic Policies

Automated Enforcement for Relaxed Information Release with Reference Points.

A Multi-Compositional Enforcement on Information Flow Security

Nsl - A Network Security Oriented Language

Attacker Control and Impact for Confidentiality and Integrity

A Domain-Specific Language for Verifying Software Requirement Constraints

Eliciting security requirements and tracing them to design: an integration of Common Criteria, heuristics, and UMLsec

A security requirements modelling language for cloud computing environments

Enforcing Reactive Noninterference with Reachability Analysis

Security Policy Specification Using a Graphical Approach

Program Rights Control Technique Based on in Formation Flow

Security Process Algebra-Based Analysis and Verification of Information Flow Security Model

SecureLLM: Using Compositionality to Build Provably Secure Language Models for Private, Sensitive, and Secret Data

FESR: A Framework for Eliciting Security Requirements Based on Integration of Common Criteria and Weakness Detection Formal Model