Handling Capabilities in Security Policies

Access control models are important tools that restrict information resources to only authorized users on the basis of some security policies. In existing access control models, security policies are defined over a set of elementary actions. The interaction between these actions has been rarely taken into account. This paper proposes an analysis of security policies that take into account dependence relations between actions using the concept of capability. We show how capabilities are used to construct a multi-level policies. Access control over action sequences are represented using deterministic finite automaton.