A Logical Representation of Common Rules for Controlling Access to Classified Information

Official policies for controlling access to classified information in the U.S. are quite complex and often difficult to enforce. We present an encoding of a common core of these policies in an authorization logic, and describe their rigorous enforcement in PCFS, a file system implemented for such purposes. †Author affiliation: Symantec Corporation This work was partially supported by the Air Force Research Laboratory under grant number FA87500720028. The views and conclusions contained herein are those of the authors and should not be interpreted as necessarily representing the official policies or endorsements, either expressed or implied, of the Air Force Research Laboratory, the U.S. Government, Symantec Corporation or Carnegie Mellon.