Automated and efficient analysis of administrative temporal RBAC policies with role hierarchies

Ranise, Silvio; Truong, Anh; Viganò, Luca

doi:10.3233/jcs-15756

Cited by 4 publications

(1 citation statement)

References 44 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Demonstrates how to use mapping to extend the functionality of an application to analyze access control policies that manage time effects based on time effect patterns. Experimental evaluations using design implementations show that one proposed graph performs better than the other two and is the first tool that can perform inference using real-time (static) detection time [4]. Ramreddy C. Analysis of the combined effects of thermal radiation and activation energy and chemical reactions on secondary convection in micropolar fluids on inclined plates.…”

Section: Introductionmentioning

confidence: 99%

Energy Internet System Based on Static Security Analysis of Multi-Energy Flow

2021

View full text Add to dashboard Cite

The proposal of the energy internet system has set off a new wave of energy reform. The integrated energy system is an important physical energy carrier of the Internet, including energy conversion, distribution and organic coordination. The purpose of this work is to study and analyze the energy network system, and to preliminarily study the steady-state modeling of the energy network system. The physical model of the Internet energy system is analyzed, and the steady-state model of the Internet energy system including the power system and the thermal system is established. Secondly, the static safety analysis of the multi-energy flow of the energy grid system is carried out. The power flow calculation results of the power system show that there is a certain difference in the settlement results between the mutual aid control method and the protection control method. Node D changes from a PV node to a balanced node, the voltage amplitude remains the same, both 1.04 p.u., and the phase angle changes, from 0 to -0.1465. The energy flow calculation results show that the gas pressure also changes in the two control modes. The pressure of node 2 changes from a constant-flow gas source node to a balance node, and the pressure of node 4 is a balance node in both control modes. The pressure remains unchanged and changes, and the energy transmission power of the two subsystems decreases.

show abstract

Section: Introductionmentioning

confidence: 99%

Energy Internet System Based on Static Security Analysis of Multi-Energy Flow

2021

View full text Add to dashboard Cite

show abstract

Automated Analysis of Access Control Policies Based on Model Checking

Truong

2020

SN COMPUT. SCI.

Self Cite

View full text Add to dashboard Cite

Access control is becoming increasingly important for today's ubiquitous systems which provide mechanism to prevent sensitive resources against unauthorized users. In access control models, the administration of access control policies is a task of paramount importance for distributed systems. A crucial analysis problem is to foresee if a set of administrators can give a user an unauthorized access permission. In this paper, we consider the analysis problem in the context of the administrative role-based access control (ARBAC) and its extension, the administrative temporal role-based access control (ATRBAC). More details, we present how to design analysis techniques, namely asasp2.1 and asaspTIME2.0 for ARBAC and ATRBAC, respectively, which are based on the ideas of a framework to analyze infinite state-transition systems. Moreover, we describe how we design heuristics to enable the analysis techniques to scale up to handle large and complex authorization policies. An extensive experimentation shows that the proposed techniques are scalability and the heuristics play a key role in the success of the analysis tools over well-known analysis techniques. Keywords Access control • Security analysis • Automated verification • Model checking • Role-based access control • Temporal role-based access control • Administration This article is part of the topical collection "Future Data and Security Engineering 2019" guest edited by Tran Khanh Dang.

show abstract