Flexible support for multiple access control policies

Jajodia, Sushil; Samarati, Pierangela; Sapino, Maria Luisa; Subrahmanian, V. S.

doi:10.1145/383891.383894

Cited by 495 publications

(405 citation statements)

References 28 publications

(41 reference statements)

Supporting

Mentioning

400

Contrasting

Unclassified

Order By: Relevance

“…The global authorisations and prohibitions (axioms (f 1) and (g1)) are obtained by composing the local relations, using the operators OP par and OP bar , respectively, which are application-dependent. For example, in some applications a request should be denied if any of the component policies denies it (i.e., a "deny takes precedence principle" [34] applies), whereas in other cases, grant takes precedence. A "first-applicable" principle takes a list of policies and returns the answer corresponding to the first policy that produces grant or deny (it returns undetermined only if no policy in the list returns grant or deny).…”

Section: Preliminaries: Category-based Access Control Policiesmentioning

confidence: 99%

“…All of these extensions can be seen as instances of the more abstract CBAC model. The Generalised TRBAC model [36] and ASL [34] are related to CBAC in that they aim at providing a general framework for the definition of policies. However, they focus essentially on the notion of users, groups and roles (interpreted as being synonymous with the notion of job function).…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

A graph-based framework for the analysis of access control policies

Alves¹,

Fernández²

2017

Theoretical Computer Science

View full text Add to dashboard Cite

We design a graph-based framework for the analysis of access control policies that aims at easing the specification and verification tasks for security administrators. We consider policies in the category-based access control model, which has been shown to subsume many of the most well known access control models (e.g., MAC, DAC, RBAC). Using a graphical representation of category-based policies, we show how answers to usual administrator queries can be automatically computed, and properties of access control policies checked. We show applications in the context of emergency situations, where our framework can be used to analyse the interaction between access control and emergency management.

show abstract

Section: Preliminaries: Category-based Access Control Policiesmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

A graph-based framework for the analysis of access control policies

Alves¹,

Fernández²

2017

Theoretical Computer Science

View full text Add to dashboard Cite

show abstract

“…This formal approach is much less pragmatic than that motivated in first by the use and administration of access control. A multiple logical frameworks are proposed to model access control [14], [15], [16], [17], [18], [19], [4]. …”

Section: Graphical Interface To Define the Role Of A Usermentioning

confidence: 99%

Concept of Graphical Interface of a Medical Information System (CheBHosp)

2015

IJSR

View full text Add to dashboard Cite

Abstract:The objective of our study is to review the basic concepts and the implementations of an interface of a health information system [1] for handling information within a hospital. The realization of the graphical interface is one of the points requiring most of the time in the development of a computer application. To make the use of the application easy, pleasant, and adaptable to the user's role, we have decided to use in the graphical interface event-based objects, called buttons. When buttons are clicked, they allow the access to different forms. These visual elements make the interface more intuitive. Moreover, the employees of a hospital are usually far from recognizing easily the use of computer software and tools. The training formation of an employee requires the use of computer software and tools for medical treatment. That's why; the use of the graphical interface that considers the constraints between forms and buttons becomes more intuitive and easy. On the other hand, the choice of the graphical interface should be adequate with the structural organization of the hospital, in order to share the interface between two major processes: handling data (inputs) and requests presented as reports (outputs) [2].

show abstract

“…Again, these access control models target a centralized environment. Jajodia et al [14] present several possibilities for deriving access rights, but their model misses a temporal component and applies only to centralized environments.…”

Section: Related Workmentioning

confidence: 99%

Securing Information Gateways with Derivation-Constrained Access Control

Hengartner

Steenkiste

2006

Security in Pervasive Computing

View full text Add to dashboard Cite

Abstract. In pervasive computing environments, information gateways derive specific information, such as a person's location, from raw data provided by a service, such as a videostream offered by a camera. Here, access control to confidential raw data provided by a service becomes difficult when a client does not have access rights to this data. For example, a client might have access to a person's location information, but not to the videostream from which a gateway derives this information. Simply granting access rights to a gateway will allow an intruder into the gateway to access any raw data that the gateway can access. We present the concept of derivation-constrained access control, which requires a gateway to prove to a service that the gateway needs requested raw data to answer a client's authorized request for derived information. Therefore, an intruder into the gateway will be limited in its capabilities. We provide a formal framework for derivation-constrained access control based on Lampson et al.'s "speaks-for" relationship. We demonstrate feasibility of our design with a sample implementation and a performance evaluation.

show abstract

Flexible support for multiple access control policies

Cited by 495 publications

References 28 publications

A graph-based framework for the analysis of access control policies

A graph-based framework for the analysis of access control policies

Concept of Graphical Interface of a Medical Information System (CheBHosp)

Securing Information Gateways with Derivation-Constrained Access Control

Contact Info

Product

Resources

About