Despite several research studies, the effective analysis of policy based systems remains a significant challenge. Policy analysis should at least (i) be expressive (ii) take account of obligations and authorizations, (iii) include a dynamic system model, and (iv) give useful diagnostic information. We present a logic-based policy analysis framework which satisfies these requirements, showing how many significant policy-related properties can be analysed, and we give details of a prototype implementation.
Finally, even if not specifically DSA-related, REF presents a policy analysis framework which considers authorizations and obligations, giving useful diagnostic information.
Expressive policy analysis with enhanced system dynamicity
ASIACCS '09
Computer Science