Policy Description Language for Authorization using Logic-Based Programming

Computer Science > Cryptography and Security [Submitted on 6 Jun 2026] Policy Description Language for Authorization using Logic-Based Programming Masaki Hashimoto, Mira Kim, Hidenori Tsuji, Hidehiko Tanaka Recently, with the impossibility of eradicating the vulnerabilities of information systems, we must prepare for the occurrence of the security incident by the multi-layer defense called the Defense-in-Depth strategy. In the multi-layer defense, it is important to authorize accesses in fine-grained granularity to compose each layer effectively, and many access control models are proposed to follow them. However, policy description languages proposed so far cannot express the models appropriately in proper granularity. In this paper, we propose a policy description language which can designate many kinds of conditions for access control, such as the dynamic status of an application process, as an element of decision data, and implement it in Datalog. Using the proposed language, we compose the policy of SELinux, which is a major implementation achieving the multi-layer defense, and we confirm the advantages of the proposed language by evaluating its validity and expressiveness. Subjects: Cryptography and Security (cs.CR); Operating Systems (cs.OS) Cite as: arXiv:2606.08119 [cs.CR]   (or arXiv:2606.08119v1 [cs.CR] for this version)   https://doi.org/10.48550/arXiv.2606.08119 Focus to learn more Submission history From: Masaki Hashimoto Assoc. Prof. [view email] [v1] Sat, 6 Jun 2026 11:48:00 UTC (35 KB) Access Paper: HTML (experimental) view license Current browse context: cs.CR < prev   |   next > new | recent | 2026-06 Change to browse by: cs cs.OS References & Citations NASA ADS Google Scholar Semantic Scholar Export BibTeX Citation Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, Media Demos Related Papers About arXivLabs Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)