Towards reasonability properties for access-control policy languages

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 160-169

  Tschantz, Michael Carl ^a,b   Krishnamurthi, Shriram ^a  

^a Brown Univerity   (United States)

^b Carnegie Mellon University   (United States)

Author keywords

Access control; Modularity; Policy

Indexed keywords

MANAGEMENT INFORMATION SYSTEMS; PUBLIC POLICY; SET THEORY; SYSTEMS ANALYSIS; USER INTERFACES;

ACCESS CONTROL; POLICY DECOMPOSITION; POLICY LANGUAGES;

COMPUTER PROGRAMMING LANGUAGES;

EID: 33748055425     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133081     Document Type: Conference Paper

References (15)

1. A. Anderson. Core and hierarchical role based access control (RBAC) profile of XACML, version 2.0. Technical report, OASIS, Sept. 2004.
2. M. Y. Becker and P. Sewell. Cassandra: Flexible trust management, applied to electronic health records. In IEEE Computer Security Foundations Workshop, pages 139-154, 2004.
3. E. Bertino, P. Samarati, and S. Jajodia. Authorizations in relational database management systems. In ACM Conference on Computer and Communications Security, pages 130-139, 1993.
4. S. De Capitani di Vimercati, P. Samarati, and S. Jajodia. Policies, models, and languages for access control. In Databases in Networked Information Systems: 4th International Workshop, volume 3433 of Lecture Notes in Computer Science. Springer-Verlag, Mar. 2005.
5. M. Evered and S. Bögeholz. A case study in access control requirements for a health information system. In Workshop on Australasian Information Security, Data Mining and Web Intelligence, and Software Internationalisation, pages 53-61, 2004.
6. M. Felleisen. On the expressive power of programming languages. Science of Computer Programming, 17:35-75, 1991.
7. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In International Conference on Software Engineering, pages 196-205, May 2005.
8. M. M. Greenberg, C. Marks, L. A. Meyerovich, and M. C. Tschantz. The soundness and completeness of Margrave with respect to a subset of XACML. Technical Report CS-05-05, Department of Computer Science, Brown University, Apr. 2005.
9. J. Halpern and V. Weissman. Using first-order logic to reason about policies. In IEEE Computer Security Foundations Workshop, pages 187-201, 2003. Updated 2006 version available at http://www.citebase.org/ cgi-bin/citations?id= oai:arXiv.org:cs/0601034.
10. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino. A unified framework for enforcing multiple access control policies. In ACM SIGMOD International Conference on Management of Data, pages 474-485, 1997.
11. J. C. Mitchell. On abstraction and the expressive power of programming languages. Science of Computer Programming, 212:141-163, 1993.
12. OASIS, eXtensible Access Control Markup Language (XACML) version 2.0. OASIS Standard, Feb. 2006.
13. C. Powers and M. Schunter. Enterprise privacy authorization language (EPAL 1.2). W3C Member Submission, Nov. 2003.
14. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, 1996.
15. M. C. Tschantz and S. Krishnamurthi. Towards reasonability properties for access-control policy languages with extended XACML analysis. Technical Report CS-06-04, Department of Computer Science, Brown University, Apr. 2006.