A Framework for the Analysis of Access Control Policies with Emergency Management

Access control technologies for Big Data management systems: literature review and future trends

“…1 The pipeline of operations at the basis of an enforcement mechanism leveraging on the unifying data model Lin et al (2010) as a basis for reasoning on the permissions granted by access control policies. Graph-based analysis approaches for category based access control policies have been proposed in Alves and Fernández (2015), with the aim to ease verification tasks of security administrators. Finally, data mining techniques have been primarily used for the detecting policy anomalies (e.g., ).…”

Evaluation Research on Emergency Capability of Emergent Events in Chinses Coal Mine

“…Coal enterprises prone to emergent events whose influence is relatively large range and destruction is more serious [5][6][7]. The urgent need for coal enterprises is to enhance emergency capability to respond to emergent events, so it is more important to analyze the current situation of emergency capability [8,9].…”

A graph-based framework for the analysis of access control policies

“…Graphbased languages have been used in the literature to model and analyse access control problems, but not within CBAC (with the exception of [3], which is the basis for this paper and considers CBAC policies without prohibitions). Koch et al [38,39], inspired by the role-permission assignment model proposed by Nyanchama and Osborn [46], use directed graphs to formalise RBAC, using a graph model similar to Baldwin's privilege graphs [8].…”

“…We also annotate edge types CA with the same possible values {A, B}, and divide edges of type CA into two sets CA A and CA B , corresponding to edges representing authorisations and prohibitions, respectively. Edges are no longer uniquely identified by their adjacent nodes, but rather by adj and auth (unless auth is undefined for a particular edge) 3 .…”

“…In Section 7, we discuss related work, and in Section 8, conclusions are drawn and further work is suggested. This paper is a revised and extended version of [3]. The extensions include dealing with policies that specify prohibitions as well as authorisations, and with distributed (multi-site) policies obtained as a composition of local site policies.…”