声明式可重构信任管理
Declarative Reconfigurable Trust Management
摘要：
近年来，出现了一种基于声明性逻辑的信任管理语言和系统的激增，这些语言和系统被提出来简化安全策略的描述、配置和实施。这些系统在表达性和复杂性方面具有不同的权衡，这取决于安全结构（例如，认证、委托、保密等）。以及执行环境的假定信任级别和规模。在本文中，我们提出了LBTrust，一个统一的声明式系统可重构的信任管理，各种安全结构可以定制和组成的声明式的方式。我们提出了一个初步的概念验证LBTrust使用LogicBlox，一个新兴的商业数据为基础的平台，企业软件系统的实现。LogicBlox语言以多种方式增强了数据库，包括约束和元编程，以及对程序员定义的元模型本身的约束的支持。元约束其用于限制允许的节目的集合。LBTrust使用LogicBlox？的元编程和元约束，以实现基于执行环境的可定制的加密、分区和分发策略。我们提出了使用案例的LBTrust基于三个信任管理系统（绑定器，D1LP和安全网络数据库），并提供了一个初步的评估绑定器为基础的信任管理系统。
英文摘要：
In recent years, there has been a proliferation of declarative logic-based trust management languages and systems proposed to ease the description, configuration, and enforcement of security policies. These systems have different tradeoffs in expressiveness and complexity, depending on the security constructs (e.g. authentication, delegation, secrecy, etc.) that are supported, and the assumed trust level and scale of the execution environment. In this paper, we present LBTrust, a unified declarative system for reconfigurable trust management, where various security constructs can be customized and composed in a declarative fashion. We present an initial proof-of-concept implementation of LBTrust using LogicBlox, an emerging commercial Datalog-based platform for enterprise software systems. The LogicBlox language enhances Datalog in a variety of ways, including constraints and meta-programming, as well as support for programmer defined constraints which on the meta-model itself ? meta-constraints ? which act to restrict the set of allowable programs. LBTrust utilizes LogicBlox?s meta-programming and meta-constraints to enable customizable cryptographic, partitioning and distribution strategies based on the execution environment. We present uses cases of LBTrust based on three trust management systems (Binder, D1LP, and Secure Network Datalog), and provide a preliminary evaluation of a Binder-based trust management system.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
