hw06.tex
author Christian Urban <christian dot urban at kcl dot ac dot uk>
Tue, 20 Nov 2012 11:58:23 +0000
changeset 79 2eaca58f9bcc
parent 74 fb14a8e1b00d
child 91 e6b34594d1e5
permissions -rw-r--r--
updated
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
63
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     1
\documentclass{article}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     2
\usepackage{charter}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     3
\usepackage{hyperref}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     4
\usepackage{amssymb}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     5
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     6
\begin{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     7
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     8
\section*{Homework 6}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     9
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    10
\begin{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    11
\item Access-control logic includes formulas of the form
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    12
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    13
$P\;\textit{says}\;F$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    14
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    15
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    16
where $P$ is a principal and $F$ a formula. Give two inference rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    17
of access-control logic involving $\textit{says}$.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    18
74
fb14a8e1b00d added hw 7
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents: 63
diff changeset
    19
\item (Removed) Was already used in HW 5
63
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    20
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    21
\item 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    22
Assume an access control logic with security levels, say top secret ({\it TS}),
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    23
secret ({\it S}) and public ({\it P}), with
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    24
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    25
$slev(\textit{P}) < slev(\textit{S}) < slev(\textit{TS})$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    26
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    27
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    28
(a) Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    29
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    30
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    31
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{write})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    32
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    33
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    34
using security levels so that it satisfies the {\it write rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    35
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it write rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    36
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    37
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    38
(b)Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    39
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    40
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    41
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    42
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    43
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    44
using security levels so that it satisfies the {\it read rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    45
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it read rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    46
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    47
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    48
\item Assume two security levels $\textit{S}$ and $\textit{TS}$, which are ordered so that $slev(\textit{S}) < slev(\textit{TS})$. 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    49
Assume further the substitution rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    50
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    51
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    52
$\Gamma \vdash slev(P) = l_1$ \hspace{4mm} $\Gamma \vdash slev(Q) = l_2$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    53
\hspace{4mm} $\Gamma \vdash l_1 < l_2$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    54
$\Gamma \vdash slev(P) < slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    55
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    56
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    57
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    58
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    59
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    60
$\Gamma \vdash slev(P) = l$ \hspace{4mm} $\Gamma \vdash slev(Q) = l$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    61
$\Gamma \vdash slev(P) = slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    62
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    63
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    64
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    65
Let $\Gamma$ be the set containing the following six formulas
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    66
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    67
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    68
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    69
$slev(\textit{S}) < slev(\textit{TS})$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    70
$slev(\textit{Agent}) = \textit{TS}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    71
$slev(\textit{File}_1) = \textit{S}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    72
$slev(\textit{File}_2) = \textit{TS}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    73
$\forall O.\;slev(O) < slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    74
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    75
$\forall O.\;slev(O) = slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    76
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    77
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    78
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    79
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    80
Using the inference rules of access-control logic and the substitution rules shown above,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    81
give proofs for the two judgements
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    82
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    83
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    84
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    85
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_1,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    86
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_1, \textit{read})$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    87
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    88
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_2,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    89
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_2, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    90
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    91
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    92
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    93
\end{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    94
\end{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    95
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    96
%%% Local Variables: 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    97
%%% mode: latex
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    98
%%% TeX-master: t
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    99
%%% End: