An algebra for fine-grained integration of XACML policies

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2009, Pages 63-72

  Rao, Prathima ^a   Lin, Dan ^b   Bertino, Elisa ^a   Li, Ninghui ^a   Lobo, Jorge ^c  

^a PURDUE UNIVERSITY   (United States)

^b MISSOURI UNIVERSITY OF SCIENCE AND TECHNOLOGY   (United States)

^c IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Access control; Policy integration; XACML

Indexed keywords

ACCESS CONTROL POLICIES; DISTRIBUTED APPLICATIONS; EXPRESSIVE POWER; INTEGRATION REQUIREMENTS; MULTI-TERMINAL BINARY DECISION DIAGRAMS; UNARY OPERATION; XACML POLICIES;

ACCESS CONTROL; ALGEBRA; BINARY DECISION DIAGRAMS; GRID COMPUTING; SECURITY SYSTEMS; SPECIFICATIONS;

INTEGRATION;

EID: 70450247027     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1542207.1542218     Document Type: Conference Paper

References (21)

1. http://fke.utm.my/downloads/espresso/.
2. Extensible access control markup language (XACML) version 2.0. OASIS Standard, 2005.
3. A. Anderson. Evaluating xacml as a policy language. Technical report, OASIS, 2003.
4. O. Arieli and A. Avron. The value of the four values. Artificial Intelligence, 102(1):97-141, 1998.
5. P. Ashley, S. Hada, G. Karjoth, C. Powers, and M. Schunter. Enterprise privacy authorization language (EPAL). Research report 3485, IBM Research, 2003.
6. M. Backes, M. Duermuth, and R. Steinwandt. An algebra for composing enterprise privacy policies. In Proceedings of 9th European Symposium on Research in Computer Security (ESORICS), volume 3193 of Lecture Notes in Computer Science, pages 33-52. Springer, September 2004.
7. P. Bonatti, S. D. C. D. Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Transactions on Information and System Security (TISSEC), 5(1):1-35, 2002.
8. G. Bruns, D. S. Dantas, and M. Huth. A simple and expressive semantic framework for policy composition in access control. In Proceedings of the 5th ACM Workshop on Formal Methods in Security Engineering (FMSE), 2007.
9. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In Proceedings of the 27th International Conference on Software Engineering (ICSE), pages 196-205, 2005.
10. M. Fujita, P. C. McGeer, and J. C.-Y. Yang. Multi-terminal binary decision diagrams: An efficient datastructure for matrix representation. Formal Methods in System Design, 10(2-3):149-169, 1997.
11. O. Grumberg, S. Livne, and S. Markovitch. Learning to order bdd variables in verification. Journal of Artificial Intelligence Research, 18:83-116, 2003.
12. J. Halpern and V. Weissman. Using first-order logic to reason about policies. In Proceedings of the Computer Security Foundations Workshop (CSFW'03), 2003.
13. R. Jagadeesan, W. Marrero, C. Pitcher, and V. Saraswat. Timed constraint programming: a declarative approach to usage control. In Proc. of the 7th ACM SIGPLAN international conference on Principles and practice of declarative programming (PPDP), pages 164-175, 2005.
14. N. Martin. The sheffer functions of 3-valued logic. The Journal of Symbolic Logic, 19(1):45-51, 1954.
15. P. Mazzoleni, E. Bertino, and B. Crispo. XACML policy integration algorithms. In Proceedings of the 11th ACM Symposium on Access Control Models and Technologies (SACMAT), pages 223-232, 2006.
16. P. McDaniel and A. Prakash. Methods and limitations of security policy reconciliation. ACM Transactions on Information and System Security (TISSEC), 9(3):259-291, 2006.
17. P. Rao, D. Lin, E. Bertino, N. Li, and J. Lobo. An algebra for fine-grained integration of xacml policies. Technical report, CERIAS, 2008.
18. G. Rousseau. Completeness in finite algebras with a single operation. Proceedings of the American Mathematical Society, 18(6):1009-1013, 1966.
19. F. B. Schneider. Enforceable security policies. ACM Transanction of Information System and Security (TISSEC), 3(1):30-50, 2000.
20. R. Wheeler. Complete connectives for 3-valued propositional calculus. Proceedings of London Mathematical Society, 3(16):167-191, 1966.
21. D. Wijesekera and S. Jajodia. A propositional policy algebra for access control. ACM Transactions on Information and System Security (TISSEC), 6(2):286-325, 2003.