An integrity policy defines the situations when modification of information is authorised and is enforced by the protection mechanisms of a system. Traditional models of protection tend to define integrity in terms of ad-hoc authorisation techniques whose effectiveness are justified more on the basis of experience and ”best practice” rather than on any theoretical foundation. In a complex appli...

in this study, the comparative advantage of main agricultural products and its relation to cropping pattern was studied in ilam province. for data analyzing the comparative advantage and government policies effects indices, policy analysis matrix (pam) were used. the obtained results for the comparative advantage indices of domestic resource cost (drc), social cost benefit (scb) and net social ...

Web applications are both the consumers and providers of information. To increase customer confidence, many websites choose to publish their privacy protection policies. However, policy conformance is often neglected. We propose a logic based framework for formally specifying and reasoning about the implementation of privacy protection by a web application. A first order extension of computatio...

We extend the separation kernel abstraction to represent the enforcement of the principle of least privilege. In addition to the inter-block flow control policy prescribed by the traditional separation kernel paradigm, we describe an orthogonal, finer-grained flow control policy by extending the protection of elements to subjects and resources, as well as blocks, within a partitioned system. We...

Widespread adoption of uniform standards is essential to the smooth operation of our modern global economy. When private organizations develop such standards, copyright protection of those standards often creates a conoict between private intellectual property rights and society’s need for standards. This conoict is especially apparent when a local or state government adopts a privately drafted...

We describe a project to advance security in distributed systems via the application of logical frameworks. At the heart of the effort lies an authorization logic which plays a triple role: (1) to specify an access-control policy as a logical theory, (2) to enforce the policy by mechanically verifying proofs in the logic, and (3) to reason about the policy by characterizing the space of all pos...