Unified Declarative Platform for Secure Networked Information Systems

Thumbnail Image
Penn collection
Departmental Papers (CIS)
Degree type
data analysis
distributed processing
information systems
query languages
query processing
telecommunication network routing
PlanetLab testbed
SeNDlog programs
access control
data analysis
declarative networking
distributed recursive query language
distributed systems
logic-based trust management systems
network datalog
network routing
network security analysis
secure network datalog language
secure networked information systems
unified declarative platform
Grant number
Copyright date
Related resources
Mao, Yun
Abadi, Martin

We present a unified declarative platform for specifying, implementing, and analyzing secure networked information systems. Our work builds upon techniques from logic-based trust management systems, declarative networking, and data analysis via provenance. We make the following contributions. First, we propose the secure network datalog (SeNDlog) language that unifies Binder, a logic-based language for access control in distributed systems, and Network Datalog, a distributed recursive query language for declarative networks. SeNDlog enables network routing, information systems, and their security policies to be specified and implemented within a common declarative framework. Second, we extend existing distributed recursive query processing techniques to execute SeNDlog programs that incorporate authenticated communication among untrusted nodes. Third, we demonstrate that distributed network provenance can be supported naturally within our declarative framework for network security analysis and diagnostics. Finally, using a local cluster and the PlanetLab testbed, we perform a detailed performance study of a variety of secure networked systems implemented using our platform.

Date of presentation
Conference name
Departmental Papers (CIS)
Conference dates
Conference location
Date Range for Data Collection (Start Date)
Date Range for Data Collection (End Date)
Digital Object Identifier
Series name and number
Volume number
Issue number
Publisher DOI
Journal Issue
Copyright 2009 IEEE. Reprinted from: Wenchao Zhou; Yun Mao; Boon Thau Loo; Abadi, M., "Unified Declarative Platform for Secure Netwoked Information Systems," Data Engineering, 2009. ICDE '09. IEEE 25th International Conference on , vol., no., pp.150-161, March 29 2009-April 2 2009 URL: http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=4812399&isnumber=4812372 This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of the University of Pennsylvania's products or services. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to pubs-permissions@ieee.org. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.
Recommended citation