Using fuzzy logic to represent security policies in the multipolicy paradigm

Abstract

Fuzzy logic is a promising way to represent non-traditional policies, like privacy, integrity and availability. Its vagueness and use of continuous data fit better with many non-military enterprise policy requirements. The theoretical foundation needed for development and assurance of computer systems has been worked out in an extensive literature, but more attention needs to be paid to its use in trusted systems. It is appropriate to use fuzzy logic for implementing aspects of the Multipolicy Paradigm.