A Logic for Reasoning About Security

Abstract

A formal framework called Security Logic 1992 is developed for specifying and reasoning about security policies and for verifying that system designs adhere to such policies. Included in this modal logic framework are definitions of knowledge, permission, and obligation. Permission is used to specify secrecy policies and obligation to specify integrity policies. The combination of policies is addressed and examples based on policies from the current literature are given. © 1992, ACM. All rights reserved.