hw06.tex
author Christian Urban <urbanc@in.tum.de>
Tue, 13 Nov 2012 00:22:28 +0000
changeset 64 d53d7d61f37b
parent 63 bcdcdb422813
child 74 fb14a8e1b00d
permissions -rw-r--r--
updated
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
63
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     1
\documentclass{article}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     2
\usepackage{charter}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     3
\usepackage{hyperref}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     4
\usepackage{amssymb}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     5
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     6
\begin{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     7
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     8
\section*{Homework 6}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
     9
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    10
\begin{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    11
\item Access-control logic includes formulas of the form
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    12
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    13
$P\;\textit{says}\;F$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    14
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    15
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    16
where $P$ is a principal and $F$ a formula. Give two inference rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    17
of access-control logic involving $\textit{says}$.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    18
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    19
\item
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    20
The informal meaning of the formula $P\;\textit{controls}\;F$ is `$P$ is entitled
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    21
to do $F$'. Give a definition for this formula in terms of $\textit{says}$. 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    22
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    23
\item 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    24
Assume an access control logic with security levels, say top secret ({\it TS}),
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    25
secret ({\it S}) and public ({\it P}), with
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    26
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    27
$slev(\textit{P}) < slev(\textit{S}) < slev(\textit{TS})$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    28
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    29
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    30
(a) Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    31
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    32
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    33
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{write})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    34
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    35
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    36
using security levels so that it satisfies the {\it write rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    37
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it write rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    38
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    39
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    40
(b)Modify the formula
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    41
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    42
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    43
$P\;\textit{controls}\;\textit{Permitted}(O, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    44
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    45
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    46
using security levels so that it satisfies the {\it read rule} from the {\it
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    47
Bell-LaPadula} access policy. Do the same again, but satisfy the {\it read rule}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    48
from the {\it Biba} access policy.
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    49
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    50
\item Assume two security levels $\textit{S}$ and $\textit{TS}$, which are ordered so that $slev(\textit{S}) < slev(\textit{TS})$. 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    51
Assume further the substitution rules
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    52
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    53
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    54
$\Gamma \vdash slev(P) = l_1$ \hspace{4mm} $\Gamma \vdash slev(Q) = l_2$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    55
\hspace{4mm} $\Gamma \vdash l_1 < l_2$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    56
$\Gamma \vdash slev(P) < slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    57
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    58
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    59
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    60
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    61
\begin{tabular}{c}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    62
$\Gamma \vdash slev(P) = l$ \hspace{4mm} $\Gamma \vdash slev(Q) = l$\\\hline
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    63
$\Gamma \vdash slev(P) = slev(Q)$
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    64
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    65
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    66
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    67
Let $\Gamma$ be the set containing the following six formulas
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    68
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    69
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    70
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    71
$slev(\textit{S}) < slev(\textit{TS})$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    72
$slev(\textit{Agent}) = \textit{TS}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    73
$slev(\textit{File}_1) = \textit{S}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    74
$slev(\textit{File}_2) = \textit{TS}$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    75
$\forall O.\;slev(O) < slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    76
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    77
$\forall O.\;slev(O) = slev(\textit{Agent}) \Rightarrow 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    78
(\textit{Agent}\;\textit{controls}\;\textit{Permitted}(O, \textit{read}))$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    79
\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    80
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    81
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    82
Using the inference rules of access-control logic and the substitution rules shown above,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    83
give proofs for the two judgements
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    84
\begin{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    85
\begin{tabular}{l}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    86
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    87
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_1,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    88
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_1, \textit{read})$\smallskip\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    89
$\Gamma \vdash
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    90
(\textit{Agent}\;\textit{says}\;\textit{Permitted}(\textit{File}_2,
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    91
\textit{read})) \Rightarrow \textit{Permitted}(\textit{File}_2, \textit{read})$\\
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    92
\end{tabular}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    93
\end{center}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    94
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    95
\end{enumerate}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    96
\end{document}
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    97
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    98
%%% Local Variables: 
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
    99
%%% mode: latex
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   100
%%% TeX-master: t
Christian Urban <urbanc@in.tum.de>
parents:
diff changeset
   101
%%% End: