@book {54,
	title = {Verification of Security Policy Enforcement in Enterprise Systems},
	series = {Emerging Challenges for Security, Privacy and Trust },
	number = {297},
	year = {2009},
	pages = {202-213},
	publisher = {Springer Berlin Heidelberg},
	organization = {Springer Berlin Heidelberg},
	edition = {2009},
	abstract = {<p>Many security requirements for enterprise systems can be expressed in a natural way as high-level access control policies. A high-level policy may refer to abstract information resources, independent of where the information is stored; it controls both direct and indirect accesses to the information; it may refer to the context of a request, i.e., the request{\textquoteright}s path through the system; and its enforcement point and enforcement mechanism may be unspecified. Enforcement of a high-level policy may depend on the system architecture and the configurations of a variety of security mechanisms, such as firewalls, host login permissions, file permissions, DBMS access control, and application-specific security mechanisms. This paper presents a framework in which all of these can be conveniently and formally expressed, a method to verify that a high-level policy is enforced, and an algorithm to determine a trusted computing base for each resource.</p>
},
	isbn = {978-3-642-01243-3},
	doi = {10.1007/978-3-642-01244-0_18},
	url = {http://link.springer.com/chapter/10.1007\%2F978-3-642-01244-0_18},
	author = {Puneet Gupta and Scott Stoller}
}
