policy monitoring in first order temporal logic
play

Policy Monitoring in First-order Temporal Logic David Basin ETH - PowerPoint PPT Presentation

Policy Monitoring in First-order Temporal Logic David Basin ETH Zurich Joint work with Felix Klaedtke and Samuel M uller Modern problems 2 Modern problems What do these topics have to do with each other? 2 Modern problems What do these


  1. Policy Monitoring in First-order Temporal Logic David Basin ETH Zurich Joint work with Felix Klaedtke and Samuel M¨ uller

  2. Modern problems 2

  3. Modern problems What do these topics have to do with each other? 2

  4. Modern problems What do these topics have to do with each other? Are they theoretically interesting? 2

  5. Technical issues Processes to monitor and control proceses � Controlling access My medical data should only be accessible to my care givers. � Controlling usage ... and then used for intended purpose, e.g., improving healthcare � Corporate governance and regulatory compliance Implement controls to reduce risks. 3

  6. Technical issues Processes to monitor and control proceses � Controlling access My medical data should only be accessible to my care givers. � Controlling usage ... and then used for intended purpose, e.g., improving healthcare � Corporate governance and regulatory compliance Implement controls to reduce risks. Core problems are theoretically interesting! 3

  7. Focus policies � Setting: security and compliance • Business processes • Policies regulating data and processes

  8. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) 4

  9. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) � General solution using metric first-order temporal logic and an associated monitoring algorithm 4

  10. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) � General solution using metric first-order temporal logic and an associated monitoring algorithm � Practical experience across a wide range of application areas 4

  11. Road map 1. An example 2. Metric First-order Temporal Logic 3. Formalization examples 4. Monitoring 5. Performance 6. Conclusion 5

  12. Road map 1. An example 2. Metric First-order Temporal Logic 3. Formalization examples 4. Monitoring 5. Performance 6. Conclusion 5

  13. Example � Consider a financial or research institute: • Employees write and publish reports • Reports may contain confidential data � Report approval policy 1. Reports must be approved before they are published. 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. � IT system logs events 2010-03-03 publish report (Charlie, #234) 2010-03-04 archive report (Alice, #104) . . . . . . . . . . . . . . . . . . 2010-03-09 approve report (Alice, #248) 2010-03-13 publish report (Bob, #248) . . . . . . . . . . . . . . . . . . � Are executions policy conform? 6

  14. Policy elements 1. Reports must be approved before they are published. 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. 7

  15. Policy elements q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Subjects q q q q q q q q q q q q q q q q q q q q q q q q q q q q qq q q q q q q q q q q q q q q q q q q qq q q q q q q q q � reports and employees q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q qqqqqqq q � unbounded over time q q q q q qqqqqqqq q q q q qqqqq q qqqqqqqqq qqqqqq qqqqqqq qq qqqqqq qqqq qqqqq qqqqqq qqqqqqqq qqqqqqq qqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqq qqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqq 1. Reports must be approved before they are published. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 7

  16. Policy elements Subjects � reports and employees � unbounded over time 1. Reports must be approved before they are published. rr r r r r r r r r r r r r r r r r r r r r r r r rr r r r r r r r r r 2. Approvals must happen at most 10 days before publication. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 3. The employees’ managers must approve the reports. q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Temporal aspects q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q qq q q q q q q q q q q qq � qualitative: before and always q q q q q q q q q qq q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q � quantitative: at most 10 days q q q q q qqqqqqq q q q q q q qqqqqqq q q qqqqq qqqqqq qqqqqqqqq qqqqqqq qqqqqqqq qq qqqq qqqqq qqqqqqq qqqqqq qqqqqq qqqqqqqq qqqqqqqqqq qqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqq 7

  17. Policy elements q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Subjects q q Event predicates q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q � approving and publishing a report q q q q q q � reports and employees q q q q q q q q qq q q q q q q q qq q q q q q q q q q q q q q q q q q q q � happen at a time point q q q � unbounded over time q q q q q q q q q q qqqqq q q q q qqqqqq q q q q qqqq qq q q qqqqq q qqqqqq q qqqqqqq q q � logged with time stamps qqqqqqqqq q qqqqqqqqqq q q q qqqqqqqqqqq q q qqqqqqqqqqqq q q q qqqqqqqqqqqqqq q q q qqqqqqqqqqqqqqq q q qqqqqqqqqqqqqq q q qqqq qqqqq qqqqqqqqqqqqq qqqqqqq qqqqqqqq qqqqqqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqq 1. Reports must be approved before they are published. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. Temporal aspects � qualitative: before and always � quantitative: at most 10 days 7

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend