Chong, StephenChen, Howard2020-04-28Chen, H., & S. Chong. Owned Policies for Information Security. Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW), IEEE, Pacific Grove, CA, 30-30 June 2004, 8199193.076952169X1063-6900http://nrs.harvard.edu/urn-3:HUL.InstRepos:42661820In many systems, items of information have own- ers associated with them. An owner of an item of in- formation may want the system to enforce a policy that restricts use of that information; we call such a policy an owned policy. Owned policies can be used in many contexts, including information flow, access control, and software licensing. In this paper we introduce and study a general framework for owned policies. Relationships between security policies for a given system may be dependent on system aspects that change between or during system execution. As a result, there may be only partial knowledge of the structure of security policies available when analyzing a system statically. We demonstrate that our framework permits static reasoning about owned policies under partial knowledge, and we also exhibit tractability results for the problem of inferring security policies.en-USConference Paper2018-07-2120042020-04-2810.1109/csfw.2004.1310737