International Journal of Information Security

, Volume 4, Issue 1, pp 2–16

Edit automata: enforcement mechanisms for run-time security policies

Regular contribution

DOI: 10.1007/s10207-004-0046-8

Cite this article as:
Ligatti, J., Bauer, L. & Walker, D. IJIS (2005) 4: 2. doi:10.1007/s10207-004-0046-8


We analyze the space of security policies that can be enforced by monitoring and modifying programs at run time. Our program monitors, called edit automata, are abstract machines that examine the sequence of application program actions and transform the sequence when it deviates from a specified policy. Edit automata have a rich set of transformational powers: they may terminate an application, thereby truncating the program action stream; they may suppress undesired or dangerous actions without necessarily terminating the program; and they may also insert additional actions into the event stream.

After providing a formal definition of edit automata, we develop a rigorous framework for reasoning about them and their cousins: truncation automata (which can only terminate applications), suppression automata (which can terminate applications and suppress individual actions), and insertion automata (which can terminate and insert). We give a set-theoretic characterization of the policies each sort of automaton can enforce, and we provide examples of policies that can be enforced by one sort of automaton but not another.


Run-time checking and monitoring Security automata Classification of security policies Language-based security 

Copyright information

© Springer-Verlag 2004

Authors and Affiliations

  1. 1.Princeton UniversityPrincetonUSA
  2. 2.Carnegie Mellon UniversityPittsburghUSA

Personalised recommendations