### Abstract

We present the Unified Policy Framework (UPF), a generic framework for modelling security (access-control) policies. UPF emphasizes the view that a policy is a policy decision function that grants or denies access to resources, permissions, etc. In other words, instead of modelling the relations of permitted or prohibited requests directly, we model the concrete function that implements the policy decision point in a system. In more detail, UPF is based on the following four principles: 1) Functional representation of policies, 2) No conflicts are possible, 3) Three-valued decision type (allow, deny, undefined), 4) Output type not containing the decision only.

### License

BSD License

### Topics

- Computer science/Security

### Session UPF

- Monads
- UPFCore
- ElementaryPolicies
- SeqComposition
- ParallelComposition
- Normalisation
- NormalisationTestSpecification
- Analysis
- UPF
- Service
- ServiceExample

### Used by

- Formal Network Models and Their Application to Firewall Policies

## Cite

×

UPF-AFP

    @article{UPF-AFP,
      author  = {Achim D. Brucker and Lukas Brügger and Burkhart Wolff},
      title   = {The Unified Policy Framework (UPF)},
      journal = {Archive of Formal Proofs},
      month   = {November},
      year    = {2014},
      note    = {\url{https://isa-afp.org/entries/UPF.html},
                 Formal proof development},
      ISSN    = {2150-914x},
    }

Download

## Download

× Download latest

Older releases:

- Sep 13, 2023 : Isabelle2023
- Oct 27, 2022 : Isabelle2022
- Dec 14, 2021 : Isabelle2021-1
- Feb 23, 2021 : Isabelle2021
- Apr 20, 2020 : Isabelle2020
- Jun 11, 2019 : Isabelle2019
- Aug 16, 2018 : Isabelle2018
- Oct 10, 2017 : Isabelle2017
- Dec 17, 2016 : Isabelle2016-1
- Feb 22, 2016 : Isabelle2016
- May 27, 2015 : Isabelle2015
- Jan 28, 2015 : Isabelle2014
- Nov 30, 2014 : Isabelle2014