Journal of Network and Systems Management

, Volume 11, Issue 3, pp 351–372

Provisions and Obligations in Policy Rule Management

  • Claudio Bettini
  • Sushil Jajodia
  • X. Sean Wang
  • Duminda Wijesekera
Article

DOI: 10.1023/A:1025711105609

Cite this article as:
Bettini, C., Jajodia, S., Wang, X.S. et al. Journal of Network and Systems Management (2003) 11: 351. doi:10.1023/A:1025711105609

Abstract

Policies in modern systems and applications play an essential role. We argue that decisions based on policy rules should take into account the possibility for the users to enable specific policy rules, by performing actions at the time when decisions are being rendered, and/or by promising to perform other actions in the future. Decisions should also consider preferences among different sets of actions enabling different rules. We adopt a formalism and mechanism devised for policy rule management in this context, and investigate in detail the notion of obligations, which are those actions users promise to perform in the future upon firing of a specific policy rule. We also investigate how obligations can be monitored and how the policy rules should be affected when obligations are either fulfilled or defaulted.

Obligation monitoringobligation enforcementtemporal policiestime-dependant obligations

Copyright information

© Plenum Publishing Corporation 2003

Authors and Affiliations

  • Claudio Bettini
    • 1
  • Sushil Jajodia
    • 2
  • X. Sean Wang
    • 2
  • Duminda Wijesekera
    • 2
  1. 1.Dipartimento di Informatica e ComunicazioneUniversita' di MilanoMilanItaly
  2. 2.Center for Secure Information SystemsGeorge Mason UniversityVirginia