hws/hw06.tex
author Christian Urban <christian dot urban at kcl dot ac dot uk>
Mon, 06 Oct 2014 21:29:13 +0100
changeset 214 166a27693dcd
parent 134 e4fda36422dd
child 298 5f6b72bb5f7f
permissions -rw-r--r--
added test
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
63
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     1
\documentclass{article}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     2
\usepackage{charter}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     3
\usepackage{hyperref}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     4
\usepackage{amssymb}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     5
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     6
\begin{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     7
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     8
\section*{Homework 6}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     9
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    10
\begin{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    11
\item Access-control logic includes formulas of the form
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    12
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    13
$P\;\textit{says}\;F$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    14
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    15
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    16
where $P$ is a principal and $F$ a formula. Give two inference rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    17
of access-control logic involving $\textit{says}$.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    18
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    19
\item 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    20
Assume an access control logic with security levels, say top secret ({\it TS}),
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    21
secret ({\it S}) and public ({\it P}), with
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    22
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    23
$slev(\textit{P}) < slev(\textit{S}) < slev(\textit{TS})$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    24
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    25
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    26
(a) Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    27
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    28
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    29
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{write})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    30
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    31
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    32
using security levels so that it satisfies the {\it write rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    33
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it write rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    34
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    35
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    36
(b)Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    37
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    38
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    39
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    40
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    41
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    42
using security levels so that it satisfies the {\it read rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    43
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it read rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    44
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    45
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    46
\item Assume two security levels $\textit{S}$ and $\textit{TS}$, which are ordered so that $slev(\textit{S}) < slev(\textit{TS})$. 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    47
Assume further the substitution rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    48
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    49
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    50
$\Gamma \vdash slev(P) = l_1$ \hspace{4mm} $\Gamma \vdash slev(Q) = l_2$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    51
\hspace{4mm} $\Gamma \vdash l_1 < l_2$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    52
$\Gamma \vdash slev(P) < slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    53
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    54
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    55
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    56
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    57
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    58
$\Gamma \vdash slev(P) = l$ \hspace{4mm} $\Gamma \vdash slev(Q) = l$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    59
$\Gamma \vdash slev(P) = slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    60
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    61
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    62
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    63
Let $\Gamma$ be the set containing the following six formulas
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    64
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    65
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    66
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    67
$slev(\textit{S}) < slev(\textit{TS})$\smallskip\\
91
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 74
diff changeset
    68
$slev(\textit{Agent}) = slev(\textit{TS})$\smallskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 74
diff changeset
    69
$slev(\textit{File}_1) = slev(\textit{S})$\smallskip\\
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 74
diff changeset
    70
$slev(\textit{File}_2) = slev(\textit{TS})$\smallskip\\
63
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    71
$\forall O.\;slev(O) < slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    72
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    73
$\forall O.\;slev(O) = slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    74
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    75
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    76
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    77
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    78
Using the inference rules of access-control logic and the substitution rules shown above,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    79
give proofs for the two judgements
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    80
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    81
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    82
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    83
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_1,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    84
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_1, \textit{read})$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    85
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    86
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_2,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    87
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_2, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    88
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    89
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    90
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    91
\end{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    92
\end{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    93
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    94
%%% Local Variables: 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    95
%%% mode: latex
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    96
%%% TeX-master: t
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    97
%%% End: