A temporal defeasible logic for handling access control policies

2015 ◽  
Vol 44 (1) ◽  
pp. 30-42 ◽  
Author(s):  
Khair Eddin Sabri ◽  
Nadim Obeid
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Defeasible Logic ◽  
Access Control Policies

A Practical Framework for Policy Composition and Conflict Resolution

2012 ◽  
Vol 3 (4) ◽  
pp. 1-26
Author(s):  
Ousmane Amadou Dia ◽  
Csilla Farkas
Keyword(s):  
Conflict Resolution ◽  
Access Control ◽  
Collaborative Environments ◽  
Control Policies ◽  
Defeasible Logic ◽  
Access Control Policies ◽  
Policy Composition ◽  
Global Power ◽  
Access Policies ◽  
Strategy I

In collaborative environments where resources must be shared across multiple sites, the access control policies of the participants must be combined in order to define a coherent policy. The relevant challenge in composing access policies is to deal with inconsistencies or modality conflicts. This difficulty exacerbates when the policies to compose are specified independently by different entities with no global power to decide in case of conflicts which entity must take precedence. This paper presents a semi-automated framework called Policy Composition and Conflict Resolution framework (P2CR) to address this issue. They focus on access control policies expressed as XACML statements. The authors propose a three-level conflicts resolution strategy: i) by using metadata added to the policies, ii) by using a defeasible logic theory, and iii) by providing recommendations to the entities owners of the resources. First, they provide a mechanism to add metadata to XACML. Second, they combine the access policies without prioritizing any of the entities involved in the composition. Given the context of the authors’ work, they consider this approach to be more suitable than the current approaches that are mainly negotiation-oriented or assign priorities to the policies. Finally, the resulting composite policy appears flexible and easily adjustable to runtime conflicts.

scholarly journals Dynamic access-control policies on XML encrypted data

2008 ◽  
Vol 10 (4) ◽  
pp. 1-37 ◽  
Author(s):  
Luc Bouganim ◽  
Francois Dang Ngoc ◽  
Philippe Pucheral
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Encrypted Data ◽  
Access Control Policies ◽  
Dynamic Access Control

An algebra for composing access control policies

2002 ◽  
Vol 5 (1) ◽  
pp. 1-35 ◽  
Author(s):  
Piero Bonatti ◽  
Sabrina De Capitani di Vimercati ◽  
Pierangela Samarati
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Access Control Policies

VeRA: Verifying RBAC and Authorization Constraints Models of Web Applications

2021 ◽  
Vol 31 (05) ◽  
pp. 655-675
Author(s):  
Thanh-Nhan Luong ◽  
Hanh-Phuc Nguyen ◽  
Ninh-Thuan Truong
Keyword(s):  
Access Control ◽  
Programming Languages ◽  
Web Application ◽  
Web Applications ◽  
Implementation Process ◽  
Record Management ◽  
Role Based Access Control ◽  
Security Issue ◽  
Control Policies ◽  
Access Control Policies

The software security issue is being paid great attention from the software development community as security violations have emerged variously. Developers often use access control techniques to restrict some security breaches to software systems’ resources. The addition of authorization constraints to the role-based access control model increases the ability to express access rules in real-world problems. However, the complexity of combining components, libraries and programming languages during the implementation stage of web systems’ access control policies may arise potential flaws that make applications’ access control policies inconsistent with their specifications. In this paper, we introduce an approach to review the implementation of these models in web applications written by Java EE according to the MVC architecture under the support of the Spring Security framework. The approach can help developers in detecting flaws in the assignment implementation process of the models. First, the approach focuses on extracting the information about users and roles from the database of the web application. We then analyze policy configuration files to establish the access analysis tree of the application. Next, algorithms are introduced to validate the correctness of the implemented user-role and role-permission assignments in the application system. Lastly, we developed a tool called VeRA, to automatically support the verification process. The tool is also experimented with a number of access violation scenarios in the medical record management system.

Polisma - A Framework for Learning Attribute-Based Access Control Policies

2020 ◽  
pp. 523-544
Author(s):  
Amani Abu Jabal ◽  
Elisa Bertino ◽  
Jorge Lobo ◽  
Mark Law ◽  
Alessandra Russo ◽  
...  
Keyword(s):  
Access Control ◽  
Control Policies ◽  
Access Control Policies ◽  
Attribute Based Access Control
Sign in / Sign up

Export Citation Format

Share Document