2011/10/17 by Carroline Dewi Puspa Kencana Ramli, Ramli, Carroline Dewi Puspa Kencana, Hanne Riis Nielson +3
Computer Science · Social Sciences · #Access Control and Trust #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Information and Cyber Security #Logic in Computer Science (cs.LO) #Semantic Web and Ontologies
paper · pdf · doi:10.48550/arxiv.1110.3706
openalex publication_date 2011/10/17 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
We study the international standard XACML 3.0 for describing security access control policy in a compositional way. Our main contribution is to derive a logic that precisely captures the idea behind the standard and to formally define the semantics of the policy combining algorithms of XACML. To guard against modelling artefacts we provide an alternative way of characterizing the policy combining algorithms and we formally prove the equivalence of these approaches. This allows us to pinpoint the shortcoming of previous approaches to formalization based either on Belnap logic or on D-algebra.