policy monitoring in first order temporal logic
play

Policy Monitoring in First-order Temporal Logic David Basin ETH - PowerPoint PPT Presentation

Policy Monitoring in First-order Temporal Logic David Basin ETH Zurich Joint work with Felix Klaedtke and Samuel M uller Modern problems 2 Modern problems What do these topics have to do with each other? 2 Modern problems What do these


  1. Policy Monitoring in First-order Temporal Logic David Basin ETH Zurich Joint work with Felix Klaedtke and Samuel M¨ uller

  2. Modern problems 2

  3. Modern problems What do these topics have to do with each other? 2

  4. Modern problems What do these topics have to do with each other? Are they theoretically interesting? 2

  5. Technical issues Processes to monitor and control proceses � Controlling access My medical data should only be accessible to my care givers. � Controlling usage ... and then used for intended purpose, e.g., improving healthcare � Corporate governance and regulatory compliance Implement controls to reduce risks. 3

  6. Technical issues Processes to monitor and control proceses � Controlling access My medical data should only be accessible to my care givers. � Controlling usage ... and then used for intended purpose, e.g., improving healthcare � Corporate governance and regulatory compliance Implement controls to reduce risks. Core problems are theoretically interesting! 3

  7. Focus policies � Setting: security and compliance • Business processes • Policies regulating data and processes

  8. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) 4

  9. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) � General solution using metric first-order temporal logic and an associated monitoring algorithm 4

  10. Focus ❄ Compliance events ✲ Checker during runtime or audit � Setting: security and compliance • Business processes • Policies regulating data and processes � Monitoring ( � = enforcement) � General solution using metric first-order temporal logic and an associated monitoring algorithm � Practical experience across a wide range of application areas 4

  11. Road map 1. An example 2. Metric First-order Temporal Logic 3. Formalization examples 4. Monitoring 5. Performance 6. Conclusion 5

  12. Road map 1. An example 2. Metric First-order Temporal Logic 3. Formalization examples 4. Monitoring 5. Performance 6. Conclusion 5

  13. Example � Consider a financial or research institute: • Employees write and publish reports • Reports may contain confidential data � Report approval policy 1. Reports must be approved before they are published. 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. � IT system logs events 2010-03-03 publish report (Charlie, #234) 2010-03-04 archive report (Alice, #104) . . . . . . . . . . . . . . . . . . 2010-03-09 approve report (Alice, #248) 2010-03-13 publish report (Bob, #248) . . . . . . . . . . . . . . . . . . � Are executions policy conform? 6

  14. Policy elements 1. Reports must be approved before they are published. 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. 7

  15. Policy elements q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Subjects q q q q q q q q q q q q q q q q q q q q q q q q q q q q qq q q q q q q q q q q q q q q q q q q qq q q q q q q q q � reports and employees q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q qqqqqqq q � unbounded over time q q q q q qqqqqqqq q q q q qqqqq q qqqqqqqqq qqqqqq qqqqqqq qq qqqqqq qqqq qqqqq qqqqqq qqqqqqqq qqqqqqq qqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqq qqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqq 1. Reports must be approved before they are published. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 7

  16. Policy elements Subjects � reports and employees � unbounded over time 1. Reports must be approved before they are published. rr r r r r r r r r r r r r r r r r r r r r r r r rr r r r r r r r r r 2. Approvals must happen at most 10 days before publication. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 3. The employees’ managers must approve the reports. q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Temporal aspects q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q qq q q q q q q q q q q qq � qualitative: before and always q q q q q q q q q qq q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q � quantitative: at most 10 days q q q q q qqqqqqq q q q q q q qqqqqqq q q qqqqq qqqqqq qqqqqqqqq qqqqqqq qqqqqqqq qq qqqq qqqqq qqqqqqq qqqqqq qqqqqq qqqqqqqq qqqqqqqqqq qqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqq 7

  17. Policy elements q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q Subjects q q Event predicates q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q q � approving and publishing a report q q q q q q � reports and employees q q q q q q q q qq q q q q q q q qq q q q q q q q q q q q q q q q q q q q � happen at a time point q q q � unbounded over time q q q q q q q q q q qqqqq q q q q qqqqqq q q q q qqqq qq q q qqqqq q qqqqqq q qqqqqqq q q � logged with time stamps qqqqqqqqq q qqqqqqqqqq q q q qqqqqqqqqqq q q qqqqqqqqqqqq q q q qqqqqqqqqqqqqq q q q qqqqqqqqqqqqqqq q q qqqqqqqqqqqqqq q q qqqq qqqqq qqqqqqqqqqqqq qqqqqqq qqqqqqqq qqqqqqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqq qqqqqqqqqq qqqqqqqqqqqq qqqqqqqqqqqqq qqqqqqqqqqqqqq qqqqqqqq 1. Reports must be approved before they are published. r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r r 2. Approvals must happen at most 10 days before publication. 3. The employees’ managers must approve the reports. Temporal aspects � qualitative: before and always � quantitative: at most 10 days 7

Recommend


More recommend