Disjunctive Policies for Database-Backed Programs

arXiv:2312.10441v2 Announce Type: replace
Abstract: When specifying security policies for databases, it is often natural to formulate disjunctive dependencies, where a piece of information may depend on at most one of two dependencies P1 or P2, but not both. A formal semantic model of such disjunctive dependencies, the Quantale of Information, was recently introduced by Hunt and Sands as a generalization of the Lattice of Information. In this paper, we seek to contribute to the understanding of disjunctive dependencies in …

arxiv cs.cr database databases dependencies information may natural piece policies security security policies semantic