Methods and limitations of security policy reconciliation

Patrick McDaniel, Atul Prakash

Research output: Contribution to journalArticlepeer-review

36 Scopus citations


A security policy is a means by which participant session requirements are specified. However, existing frameworks provide limited facilities for the automated reconciliation of participant policies. This paper considers the limits and methods of reconciliation in a general-purpose policy model. We identify an algorithm for efficient two-policy reconciliation, and show that, in the worst-case, reconciliation of three or more policies is intractable. Further, we suggest efficient heuristics for the detection and resolution of intractable reconciliation. Based upon the policy model, we describe the design and implementation of the Ismene policy language. The expressiveness of Ismene, and indirectly of our model, is demonstrated through the representation and exposition of policies supported by existing policy languages. We conclude with brief notes on the integration and enforcement of Ismene policy within the Antigone communication system.

Original languageEnglish (US)
Pages (from-to)73-87
Number of pages15
JournalProceedings of the IEEE Computer Society Symposium on Research in Security and Privacy
StatePublished - Jan 1 2002

All Science Journal Classification (ASJC) codes

  • Software


Dive into the research topics of 'Methods and limitations of security policy reconciliation'. Together they form a unique fingerprint.

Cite this