Expressive Policy Analysis with Enhanced System Dynamicity

Jorge Lobo (IBM T. J. Watson)


Abstract:

Although several research efforts have been devoted to the issue, the
effective analysis of policy based  security systems remains a
significant challenge, Policy analysis should at least (i) be expressive
(ii) take account of obligations and authorizations, (iii) include a
dynamic system model, and (iv) give useful diagnostic information.
I will present a logic-based policy analysis framework which satisfies
these requirements, showing how many properties such as modality
conflicts, separation of duties, and others can be analyzed. We give
details of a prototype implementation.

Bio:

Jorge Lobo joined IBM T. J. Watson Research Center in 2004. Previous
to IBM he was principal architect at Teltier Technologies, a start-up
company in the wireless telecommunication space acquired by Dynamicsoft
and now part of Cisco System. Before Teltier he was associate professor
of CS at the University of Illinois at Chicago and member of the Network
Computing Research Department at Bell Labs. In Teltier he developed a
policy server for the availability management of Presence Servers. The
servers were successfully tested inside two GSM networks in Europe. He
also designed and co-developed PDL, one of the first generic policy
languages for network management. A policy server based on PDL was
deployed for the management and monitoring of Lucent first generation
of softswitch networks.

Jorge Lobo has more than 50 publications in international journals and
conferences in the areas of Networks, Databases and AI. He is co-author
of a MIT book on logic programming and is co-founder and member of the
steering committee for the IEEE International Workshop on Policies for
Distributed Systems and Networks. He has a PhD in CS from University of
Maryland at College Park, and a MS and a BE from Simon Bolivar University,
Venezuela.