An approach to evaluate policy similarity

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2007, Pages 1-10

  Lin, Dan ^a   Rao, Prathima ^a   Bertino, Elisa ^a   Lobo, Jorge ^b  

^a Purdue University   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Access control policies; Policy similarity measure; XACML policies

Indexed keywords

ALGORITHMS; BOOLEAN FUNCTIONS; COMPUTATIONAL COMPLEXITY; GRID COMPUTING; NUMERICAL METHODS;

ACCESS CONTROL POLICIES; POLICY SIMILARITY MEASURES; XACML POLICIES;

COMPUTER SUPPORTED COOPERATIVE WORK;

EID: 34548023083     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1266840.1266842     Document Type: Conference Paper

References (18)

1. D. Agrawal, J. Giles, K. W. Lee, and J. Lobo. Policy ratification. In Proceedings of the 6th IEEE International Workshop on Policies {or Distributed Systems and Networks (POLICY), pages 223-232, 2005.
2. T. Ahmed and A. R. Tripathi. Static verification of security requirements in role based cscw systems. In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies (SACMAT), pages 196-203, 2003.
3. M. Backes, G. Karjoth, W. Bagga, and M. Schunter. Efficient comparison of enterprise privacy policies. In Proceedings of the 2004 ACM Symposium on Applied Computing (SAC), pages 375-382, 2004.
4. M. Ehrig, P. Haase, M. Hefke, and N. Stojanovic. Similarity for ontologies - a comprehensive framework. In Proceedings of the 13th European Conference on Information Systems, Information Systems in a Rapidly Changing Economy (ECIS), 2005.
5. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In Proceedings of the 27th International Conference on Software Engineering (ICSE), pages 196-205, 2005.
6. D. P. Guelev, M. Ryan, and P. Schobbens. Model-checking access control policies. In Proceedings of the 7th Information Security Conference (ISC), pages 219-230, 2004.
7. T. hoad and J. Zobel. Methods for identifying versioned and plagiarized documents. Journal of the American Society for Information Science and Technology, 54(3):203-215, 2003.
8. M. Koch, L. V. Mancini, and F. P.-Presicce. On the specification and evolution of access control policies. In Proceedings of the 6th A CM Symposium on Access Control Models and Technologies (SACMAT), pages 121-130, 2001.
9. E. Lupu and M. Sloman. Conflicts in policy-based distributed systems management. IEEE Transactions on Software Engineering (TSE), 25(6):852-869, 1999.
10. P. Mazzoleni, E. Bertino, and B. Crispo. Xacml policy integration algorithms. In Proceedings of the 11th ACM Symposium on Access Control Models and Technologies (SACMAT), pages 223-232, 2006.
11. S. Melnik, H. Garcia-Molina, and E. Rahm. Similarity flooding: A versatile graph matching algorithm and its application to schema matching. In Proceedings of the 18th International Conference on Data Engineering (ICDE), pages 117-128, 2002.
12. D. Metzler, Y. Bernstein, W. B. Croft, A. Moffat, and J. Zobel. Similarity measures for tracking information flow. In Proceedings of the 14th ACM international conference on Information and knowledge management (CIKM), pages 517-524, 2005.
13. T. Milo and S. Zohar. Using schema matching to simplify heterogeneous data translation. In Proceedings of the 24th International Conference of Very Large Data Bases (VLDB), pages 122-133, 24-27 1998.
14. J. D. Moffett and M. S. Sloman. Policy conflict analysis in distributed system management. Journal of Organizational Computing, 1993.
15. T. Moses. Extensible access control markup language (xacml) version 1.0. Technical report, OASIS, 2003.
16. E. Rahm and P. A. Bernstein. A survey of approaches to automatic schema matching. The International Journal on Very Large Data Bases (VLDB Journal), 10(4):334-350, 2001.
17. A. Schaad, J. D. Moffett, and J. Jacob. The role-based access control system of a european bank: a case study and discussion. In Proceedings of the 6th ACM Symposium on Access Control Models and Technologies (SACMAT), pages 3-9, 2001.
18. N. Zhang, M. Ryan, and D. P. Guelev. Evaluating access control policies through model checking. In Proceedings of the 8th Information Security Conference (ISC), pages 446-460, 2005.