XACML policy integration algorithms

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 219-226

  Mazzoleni, P ^a   Bertino, E ^b   Crispo, B ^c,d   Sivasubramanian, S ^c  

^a UNIVERSITY OF MILAN   (Italy)

^b PURDUE UNIVERSITY   (United States)

^c VU UNIVERSITY AMSTERDAM   (Netherlands)

^d UNIVERSITY OF TRENTO   (Italy)

Author keywords

Content Distributed Networks; Distributed Systems; Security policies integration; Web Services; XACML

Indexed keywords

ALGORITHMS; DISTRIBUTED COMPUTER SYSTEMS; INFORMATION SERVICES; SECURITY OF DATA; VIRTUAL CORPORATION;

CONTENT DISTRIBUTED NETWORKS; SECURITY POLICIES INTEGRATION; WEB SERVICES; XACML;

COMPUTER PROGRAMMING LANGUAGES;

EID: 33748086468     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133089     Document Type: Conference Paper

References (25)

1. XAMCL and OASIS Security Services Technical Committee, "eXtendible Access Control Markup Language (xacml) committee specification 2.0," Feb 2005.
2. "U.S. government department of health and human services, health insurance portability and accountability act (hipaa). 1996."
3. "European union, directive on data privacy," 1998.
4. A. Anderson, "A comparison of two privacy policy languages: Epal and xacml," September 2005.
5. HP, "Hp virtualized infrastructure solutions for mysap business suite." http://h71028.www7.hp.com/enterprise/downloads/HP-virtualSAP. Solution-Brief.pdf, 2005.
6. IBM, "Automate and integrate within and across it processes to support the continually changing needs of business processes." IBM White paper, 2004.
7. D. Kusnetzky and C. W. Olofson, "Oracle 10g: Putting grids to work." http://www.oracle.com/technology/tech/grid/ collateral/ idc_oracle10g.pdf, 2004.
8. Synapse, "Virtualization: The transformation of enterprise it. [online]," 2005.
9. M. Baker, K. Kimberly, and M. Sean, "Why traditional storage systems do not help us save stuff forever," HPL-2005-120. HP Labs 2005 Technical Reports, 2005.
10. "Lockss program web page [online]," http://lockss. Stanford.edu/.
11. "Lionshare project [online]," http://lionshare.its.psu.edu/ main/.
12. D. Morr, "Lionshare: A federated p2p app," in Internet2 members meeting, Fall 2004.
13. A. Anderson, "An introduction to the web services policy language," in IEEE Policy 2004 Workshop, June 2004.
14. M. Lorch, S. Proctor, R. Lepro, D. Kafura, and S. Shah, "First experiences using xacml for access control in distributed systems," in XMLSEC '03: Proceedings of the 2003 ACM workshop on XML security. New York, NY, USA: ACM Press, 2003, pp. 25-37.
15. "Enterprise privacy authorization language (epal)," 2003.
16. A. Anderson, "Ws-policyconstraints: A domain-independent web services policy assertion language," November 2005.
17. "Oasis ebxml collaboration protocol profile and agreement technical committee, collaboration-protocol profile and agreement specification version 2.0, September 2002."
18. "Sun's xacml implementation web page [online] http://sunxacml. sourceforge.net/."
19. P. Mazzoleni, B. Crispo, S. Sivasubramanian, and E. Bertino, "Efficient integration of fine-grained access control in large-scale grid services." in SCC 2005: IEEE International Conference on Service Computing, July 2005.
20. "http://docs.oasis-open.org/xacml/xacmlrefs.html."
21. W3C, "W3c workshop on constraints and capabilities for web services," October 2004.
22. "Response to the uml 2.0 ocl rfp (ad/2000-09-03), revised submission, version 1.6, 6 January 2003, omg document ad/2003-01-07."
23. D. Huang, "Semantic policy-based security framework for business processes," in 4th Semantic Web and Policy Workshop, November 2005.
24. "W3c web ontology language."
25. D. Morr, "Wspl: an xacml-based web services policy language," in Internets members meeting, Fall 2004.