No Registration Needed: How to Use Declarative Policies and Negotiation to Access Sensitive Resources on the Semantic Web

Gavriloaie, Rita; Nejdl, Wolfgang; Olmedilla, Daniel; Seamons, Kent E.; Winslett, Marianne

doi:10.1007/978-3-540-25956-5_24

Cited by 80 publications

(75 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…PeerTrust [7] builds upon previous work on policy-based access control and release for the Web and implements automated trust negotiation for such a dynamic environment.…”

Section: Peertrustmentioning

confidence: 99%

“…Protune's rule language extends two previous languages: PAPL [20], which until 2002 was one of the most complete policy languages for trust negotiation, and PeerTrust [7], which supports distributed credentials and a more flexible policy protection mechanism. In addition, the framework features a powerful declarative meta-language for driving some critical negotiation decisions, and integrity constraints for monitoring negotiations and credential disclosure.…”

Section: Protunementioning

confidence: 99%

“…PeerTrust can be used to provide advanced policy-driven negotiations on the Web in order to control access to resources [7,26]. A user receives a signed (by a trusted authority) applet after requesting access to a resource.…”

Section: Policies On the Webmentioning

confidence: 99%

“…During the past few years, some of the most innovative ideas on security policies arose in the area of automated trust negotiation [44,8,45,7,46,47,48,49,50]. That branch of research considers peers that are able to automatically negotiate credentials according to their own declarative, rule-based policies.…”

Section: Trust Managementmentioning

confidence: 99%

“…However, it is not expressive enough (it is a schema, not a language, and only describes purpose for the gathered data) and it does not allow for enforcement mechanisms. On the other hand, there is a wide offer of policy languages that have been developed to date [5,6,7,8], addressing the general requirements for a Semantic Web policy language: expressiveness, simplicity, enforceability, scalability, and analyzability [9]. These policies can be exchanged between entities on the Semantic Web and therefore they are described using languages with well-founded semantics.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Rule-Based Policy Representation and Reasoning for the Semantic Web

Bonatti

Olmedilla

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Summary. The Semantic Web aims at enabling sophisticated and autonomic machine to machine interactions without human intervention, by providing machines not only with data but also with its meaning (semantics). In this setting, traditional security mechanisms are not suitable anymore. For example, identity-based access control assumes that parties are known in advance. Then, a machine first determines the identity of the requester in order to either grant or deny access, depending on its associated information (e.g., by looking up its set of permissions). In the Semantic Web, any two strangers can interact with each other automatically and therefore this assumption does not hold. Hence, a semantically enriched process is required in order to regulate an automatic access to sensitive information. Policy-based access control provides sophisticated means in order to support protecting sensitive resources and information disclosure.

show abstract

“…PeerTrust [7] builds upon previous work on policy-based access control and release for the Web and implements automated trust negotiation for such a dynamic environment.…”

Section: Peertrustmentioning

confidence: 99%

Section: Protunementioning

confidence: 99%

Section: Policies On the Webmentioning

confidence: 99%

Section: Trust Managementmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Rule-Based Policy Representation and Reasoning for the Semantic Web

Bonatti

Olmedilla

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

show abstract

Ontology-Based Policy Specification and Management

Nejdl

Olmedilla

Winslett

et al. 2005

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Abstract. The World Wide Web makes it easy to share information and resources, but offers few ways to limit the manner in which these resources are shared. The specification and automated enforcement of security-related policies offer promise as a way of providing controlled sharing, but few tools are available to assist in policy specification and management, especially in an open system such as the Web, where resource providers and users are often strangers to one another and exact and correct specification of policies will be crucial. In this paper, we propose the use of ontologies to simplify the tasks of policy specification and administration, discuss how to represent policy inheritance and composition based on credential ontologies, formalize these representations and the according constraints in Frame-Logic, and present POLICYTAB, a prototype implementation of our proposed scheme as a Protégé plug-in to support policy specification.

show abstract