5th International ICST Conference on Collaborative Computing: Networking, Applications, Worksharing

Research Article

Building a stateful reference monitor with coloured petri nets

Download553 downloads
  • @INPROCEEDINGS{10.4108/ICST.COLLABORATECOM2009.8375 ,
        author={Basel Katt and Michael Hafner and Xinwen Zhang},
        title={Building a stateful reference monitor with coloured petri nets},
        proceedings={5th International ICST Conference on Collaborative Computing: Networking, Applications, Worksharing},
        proceedings_a={COLLABORATECOM},
        year={2009},
        month={12},
        keywords={Authorization Collaboration Companies Convergence Costs Medical services Monitoring Outsourcing Petri nets Security},
        doi={10.4108/ICST.COLLABORATECOM2009.8375 }
    }
    
  • Basel Katt
    Michael Hafner
    Xinwen Zhang
    Year: 2009
    Building a stateful reference monitor with coloured petri nets
    COLLABORATECOM
    ICST
    DOI: 10.4108/ICST.COLLABORATECOM2009.8375
Basel Katt1,*, Michael Hafner1,*, Xinwen Zhang2,*
  • 1: University of Innsbruck, Innsbruck, Austria
  • 2: Samsung Information Systems, America, San Jose, CA, USA
*Contact email: basel.katt@uibk.ac.at, m.hafner@uibk.ac.at, xinwen.z@samsung.com

Abstract

The need for collaboration and information sharing has been recently growing dramatically with the convergence of outsourcing and off shoring, the increasing need to cut costs through cooperative agreements between partners as well as competitors, and the rise in the demand for a high-quality healthcare from different healthcare actors. New access control requirements have emerged in these modern collaborative and distributed environments, such as continuous control of resource usage considering temporal and cardinal rules, execution of additional tasks to compensate violation of security policies or enforce obliged actions, and constraints for concurrent access and usage of shared resources. These new requirements stipulate the need for new policy models and advanced enforcement mechanisms. Towards these we aim at developing a formal framework based on coloured Petri nets theory for the specification of enforcement mechanisms of a resource-centric reference monitor.