Analyzing web access control policies

16th International World Wide Web Conference, WWW2007

Volumn , Issue , 2007, Pages 677-686

  Kolovski, Vladimir ^a   Hendler, James ^a   Parsia, Bijan ^b  

^a University of Maryland ^*  (United States)

^b UNIVERSITY OF MANCHESTER   (United Kingdom)

Author keywords

Access control; Description logics; Policy analysis; XACML

Indexed keywords

DESCRIPTION LOGICS; LOGIC BASED ANALYSIS TOOLS; POLICY ANALYSIS; XACML;

COMPUTER HARDWARE DESCRIPTION LANGUAGES; FORMAL LOGIC; MARKUP LANGUAGES; VERIFICATION; WORLD WIDE WEB;

ACCESS CONTROL;

EID: 35348924314     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1242572.1242664     Document Type: Conference Paper

References (19)

1. Continue access control policy example., 2005. http://www.cs.brown.edu/ research/plt/software/margrave/versions/01-01/examples/continue/.
2. Xacml references, v1.65. http://docs.oasisopen.org/xacml/references/ xacmlrefsv1.65.html, 2006.
3. A. Anderson. Core and hierarchical role based access control (rbac) profile of xacml v2.0, February 2005.
4. J. Bryans. Reasoning about xacml policies using csp. In SWS '05: Proceedings of the 2005 workshop on Secure web services, pages 28-35, New York, NY, USA, 2005. ACM Press.
5. M. Dean and G. Schreiber. Owl web ontology language reference w3c recommendation., feb 2004.
6. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C Tschantz. Verification and change-impact analysis of access-control policies. In ICSE '05: Proceedings of the 27th international conference on Software engineering, pages 196-205, 2005.
7. S. Godik and T. Moses. Oasis extensible access control markup language (xacml) version 1.1. oasis committee specification, July 2003.
8. B. C. Grau, I. Horrocks, B. Parsia, P. Patel-Schneider, and U. Sattler. Next steps for owl. In OWL Experienced and Directions, 2006.
9. D. P. Guelev, M. Ryan, and P.-Y. Schobbens. Model-checking access control policies. In ISC, pages 219-230, 2004.
10. I. Horrocks and U. Sattler. A tableaux decision procedure for SHOIQ. In Proc. of the 19th Int. Joint Conf. on Artificial Intelligence (IJCAI 2005). Morgan Kaufman, 2005.
11. G. Hughes and T. Bultan. Automated verification of access control policies (technical report). Technical Report 2004-22, Department of Computer Science, University of California, Santa Barbara, September 2004.
12. D. Jackson. Alloy: a lightweight object modelling notation. ACM Trans. Softw. Eng. Methodol., 11(2):256-290, 2002.
13. V. Kolovski. Formalizing XACML Using Defeasible Description Logics. Technical Report TR-233-H, University of Maryland - College Park, 2006.
14. F. Massacci. Reasoning about security: A logic and a decision method for role-based access control. In ECSQARU-FAPR, pages 421-435, 1997.
15. B. Parsia and E. Sirin. Pellet: An OWL DL reasoner. In Third International Semantic Web Conference -Poster, 2004.
16. K. Wang, D. Billington, J. Blee, and G. Antoniou. Combining description logic and defeasible logic for the semantic web. In RuleML, pages 170-181, 2004.
17. WS-Policy. Web services policy framework (ws-policy). http://www106.ibm.com/developerworks/library/specification/wspolfram/.
18. N. Zhang, M. D. Ryan, and D. Guelev. Evaluating access control policies through model checking. In Eighth Information Security Conference (ISC05), 2005.
19. C. Zhao, N. Heilili, S. Liu, and Z. Lin. Representation and reasoning on rbac: A description logic approach. In ICTAC, pages 381-393, 2005.