Declarative Reconfigurable Trust Management

In recent years, there has been a proliferation of declarative logic-based trust management languages and systems proposed to ease the description, configuration, and enforcement of security policies. These systems have different tradeoffs in expressiveness and complexity, depending on the security constructs (e.g. authentication, delegation, secrecy, etc.) that are supported, and the assumed trust level and scale of the execution environment. In this paper, we present LBTrust, a unified declarative system for reconfigurable trust management, where various security constructs can be customized and composed in a declarative fashion. We present an initial proof-of-concept implementation of LBTrust using LogicBlox, an emerging commercial Datalog-based platform for enterprise software systems. The LogicBlox language enhances Datalog in a variety of ways, including constraints and meta-programming, as well as support for programmerdefined constraints on the meta-model itself

• Type: Conference
• Year: 2009
• Where: CIDR
• Authors: William R. Marczak, David Zook, Wenchao Zhou, Molham Aref, Boon Thau Loo
• Keywords: CIDR 2007, CIDR 2009, Declarative Logic-based Trust, Trust Management, Trust Management System