Proceedings. 4-6 June 2003 Lake Como, Italy. Los Alamitos, California. Washington Brussels Tokyo

Transcription

1 Proceedings

2

3 Proceedings 4-6 June 2003 Lake Como, Italy Los Alamitos, California Washington Brussels Tokyo

4 Copyright 2003 by The Institute of Electrical and Electronics Engineers, Inc. All rights reserved Copyright and Reprint Permissions: Abstracting is permitted with credit to the source. Libraries may photocopy beyond the limits of US copyright law, for private use of patrons, those articles in this volume that carry a code at the bottom of the first page, provided that the per-copy fee indicated in the code is paid through the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA Other copying, reprint, or republication requests should be addressed to: IEEE Copyrights Manager, IEEE Service Center, 445 Hoes Lane, P.O. Box 133, Piscataway, NJ The papers in this book comprise the proceedings of the meeting mentioned on the cover and title page. They reflect the authors opinions and, in the interests of timely dissemination, are published as presented and without change. Their inclusion in this publication does not necessarily constitute endorsement by the editors, the IEEE Computer Society, or the Institute of Electrical and Electronics Engineers, Inc. IEEE Computer Society Order Number PR01839 ISBN Library of Congress Number Additional copies may be ordered from: IEEE Computer Society IEEE Service Center IEEE Computer Society Customer Service Center 445 Hoes Lane Asia/Pacific Office Los Vaqueros Circle P.O. Box 1331 Watanabe Bldg., P.O. Box 3014 Piscataway, NJ Minami-Aoyama Los Alamitos, CA Tel: Minato-ku, Tokyo Tel: Fax: JAPAN Fax: Tel: csbooks@computer.org customer-service@ieee.org Fax: tokyo.ofc@computer.org Individual paper REPRINTS may be ordered at: reprints@computer.org Editorial production by Stephanie Kawada Cover art production by Joe Daigle/Studio Productions Printed in the United States of America by The Printing House

5 Proceedings Table of Contents Preface...viii Committees...ix Reviewers...xi Specification and Analysis Chisel: A Policy-Driven, Context-Aware, Dynamic Adaptation Framework...3 J. Keeney and V. Cahill Using UML and Maude for Writing and Reasoning about ODP Policies...15 F. Durán, J. Herrador, and A. Vallecillo Using Event Calculus to Formalise Policy Specification and Analysis...26 A. K. Bandara, E. C. Lupu, and A. Russo Networks and Mobile Systems Prediction-Based Policy Adaptation for QoS Management in Wireless Networks...43 N. Samaan and A. Karmouch PECAN: Policy-Enabled Configuration Across Networks...52 R. Chadha, Y.-H. Cheng, T. Cheng, S. Gadgil, A. Hafid, K. Kim, G. Levin, N. Natarajan, K. Parmeswaran, A. Poylisher, and J. Unger A Policy Language for a Pervasive Computing Environment...63 L. Kagal, T. Finin, and A. Joshi Short Papers 1 Analysis of Integrity Policies Using Soft Constraints...77 S. Bistarelli and S. N. Foley v

6 X-TNL: An XML-Based Language for Trust Negotiations...81 E. Bertino, E. Ferrari, and A. Squicciarini Towards Policy-Based Information Management for the Joint BattleSpace InfoSphere...85 R. Cherinka, C. Wild, D. Allen, C. Smith, Y. Zhang, R. Panek, and S. Semy A Toolkit-Based Approach to Policy-Managed Storage...89 M. Devarakonda, A. Segal, and D. Chess KAoS Policy and Domain Services: Toward a Description-Logic Approach to Policy Representation, Deconfliction, and Enforcement...93 A. Uszok, J. Bradshaw, R. Jeffers, N. Suri, P. Hayes, M. Breedy, L. Bunch, M. Johnson, S. Kulkarni, and J. Lott Access Control Policy Contexts: Controlling Information Flow in Parameterised RBAC...99 A. Belokosztolszki, D. M. Eyers, and K. Moody Towards Automated Negotiation of Access Control Policies V. G. Bharadwaj and J. S. Baras Organization Based Access Control A. A. El Kalam, R. El Baida, P. Balbiani, S. Benferhat, F. Cuppens, Y. Deswarte, A. Miège, C. Saurel, and G. Trouessin Security and Privacy Translating Privacy Practices into Privacy Promises How to Promise What You Can Keep G. Karjoth, M. Schunter, and E. Van Herreweghen Spatial Policies for Sentient Mobile Applications D. Scott, A. Beresford, and A. Mycroft Analyzing Security-Enhanced Linux Policy Specifications M. Archer, E. Leonard, and M. Pradella Policy Management in the Large Toward Explicit Policy Management for Virtual Organizations G. Wasson and M. Humphrey Towards Federated Policy Management R. Hull, B. Kumar, and D. Lieuwen vi

7 Applications Policy Based Electronic Transmission of Prescriptions D. W. Chadwick and D. Mundy Using Policies in the Checking of Business to Business Contracts P. F. Linington and S. Neal Policy-Driven Licensing Model for Component Software Q. Zhao, Y. Zhou, and M. Perry Short Papers 2 Enforcing History-Based Security Policies in Mobile Agent Systems P. Dias, C. Ribeiro, and P. Ferreira A Policy Based Approach for Automated Topology Management of Peer to Peer Networks and a Prototype Implementation A. Di Ferdinando, P. Mckee, and A. Amoroso Inter-Domains Policy Negotiation F. Barrere, A. Benzekri, F. Grasset, R. Laborde, and B. Nasser A PBNM System for Integrated QoS and Multicast Management L. Z. Granville, L. Vaguetti, M. J. B. Almeida, and L. M. R. Tarouco Enforcement of Communications Policies in Software Agent Systems through Mobile Code N. Suri, M. Carvalho, J. M. Bradshaw, M. R. Breedy, T. B. Cowin, P. T. Groth, R. Saavedra, and A. Uszok Author Index vii