Abstract: Although several research efforts have been devoted to the issue, the effective analysis of policy based security systems remains a significant challenge. Policy analysis should at least (i) be expressive (ii) take account of obligations and authorizations, (iii) include a dynamic system model, and (iv) give useful diagnostic information. I will present a logic-based policy analysis framework which satisfies these requirements, showing how properties such as modality conflicts, separation of duties, and others can be analyzed. We give details of a prototype implementation.
Bio: Jorge Lobo joined IBM T. J. Watson Research Center in 2004. Previous to IBM he was principal architect at Teltier Technologies, a start-up company in the wireless telecommunication space acquired by Dynamicsoft and now part of Cisco System. Before Teltier he was an Associate Professor of CS at the University of Illinois at Chicago and a member of the Network Computing Research Department at Bell Labs. At Teltier he developed a policy server for the availability management of Presence Servers. The servers were successfully tested inside two GSM networks in Europe. He also designed and co-developed PDL, one of the first generic policy languages for network management. A policy server based on PDL was deployed for the management and monitoring of Lucent's first generation of softswitch networks.
Jorge Lobo has more than 50 publications in international journals and conferences in the areas of Networks, Databases and AI. He is co-author of an MIT Press book on logic programming and an IBM Press book on policy technologies for self-managing systems. He is co-founder and member of the steering committee for the IEEE International Symposium on Policies for Distributed Systems and Networks. He has a PhD in CS from the University of Maryland at College Park, and an MS and a BE from Simon Bolivar University, Venezuela.