An attribute-based authorization policy framework with dynamic conflict resolution

ACM International Conference Proceeding Series

Volumn , Issue , 2010, Pages 37-50

  Mohan, Apurva ^a   Blough, Douglas M ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

attribute based authorization; authorization policy; conflict resolution

Indexed keywords

AUTHORIZATION DECISION; AUTHORIZATION POLICY; AUTHORIZATION RULES; AUTHORIZATION SYSTEMS; CHANGING ENVIRONMENT; CONFLICT RESOLUTION; CONTEXTUAL INFORMATION; CURRENT SYSTEM; DYNAMIC SYSTEMS; NOVEL METHODS; POLICY COMBINATION; POLICY LEVEL; PROTOTYPE SYSTEM; XACML POLICIES;

DYNAMICAL SYSTEMS; DYNAMICS; INTERNET;

ALGORITHMS;

EID: 77953976354     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1750389.1750395     Document Type: Conference Paper

References (26)

1. Enterprise Privacy Authorization Language (EPAL). http://www.w3.org/ Submission/2003/SUBM-EPAL-20031110/.
2. eXtensible Access Control Markup Language (XACML). www.oasis-open.org/ committees/xacml/.
3. Ldap authentication attributes. In http://docs.sun.com/source/817-7647/ ldapauth.htmlwp19608.
4. P3P: The Platform for Privacy Preferences. http://www.w3.org/P3P/.
5. R. Agrawal, D. Asonov, R. Bayardo, T. Grandison, C. Johnson, and J. Kiernan. Managing disclosure of private health data with hippocratic databases. IBM Research White Paper, Januray 2005.
6. R. Agrawal, P. Bird, T. Grandison, J. Kiernan, S. Logan, and W. Rjaibi. Extending relational database systems to automatically enforce privacy policies. In ICDE, pages 1013-1022, April 2005.
7. A. Barth, J. Mitchell, and J. Rosenstein. Conflict and combination in privacy policy languages. In Workshop on Privacy in the Electronic Society, October 2004.
8. E. Bertino, C. Brodie, S. B. Calo, L. F. Cranor, C. Karat, J. Karat, N. Li, D. Lin, J. Lobo, Q. Ni, P. R. Rao, and X. Wang. Analysis of privacy and security policies. IBM Journal of Research and Development, 53, 2009.
9. E. Bertino, S. Jajodia, and P. Samarati. Supporting multiple access control policies in database systems. In Proceedings of the IEEE Symposium on Security and Privacy, May 1996.
10. J. Chomicki, M. J. Lobo, and S. Naqvi. Conflict resolution using logic programming. IEEE Transactions on Knowledge and Data Engineering, 15(1), Januray/February 2003.
11. K. Fisler, S. Krishnamurthi, L. Meyerovich, and M. Tschantz. Verification and change impact analysis of access control policies. In International Conference on Software Engineering, May 2005.
12. J. Halpern and V. Weissman. Using first-order logic to reason about policies. In IEEE Computer Security Foundations Workshop, 2003.
13. J. Jin, G.-J. Ahn, M. J. Covington, and X. Zhang. Toward an access control model for sharing composite electronic health record. In 4th International Conference on Collaborative Computing, 2008.
14. J. Jin, G.-J. Ahn, H. Hu, M. J. Covington, and X. Zhang. Patient-centric authorization framework for sharing electronic health records. In SACMAT, 2009.
15. H. Kamoda, M. Yamaoka, S. Matsuda, K. Broda, and M. Sloman. Policy conflict analysis using free variable tableaux for access control in web services environments. In WWW Conference, 2005.
16. H. Koshutanski and F. Massacci. An access control framework for business processes for web services. In ACM Workshop on XML Security, October 2003.
17. N. Li, Q. Wang, W. Qardaji, E. Bertino, P. Rao, J. Lobo, and D. Lin. Access control policy combining: Theory meets practice. In ACM SACMAT, 2009.
18. E. Lupu and M. Sloman. Conflicts in policy-based distributed systems management. In IEEE Transactions on Software Engineering, pages 852-869, Nov/Dec 1999.
19. A. Masoumzadeh, M. Amini, and R. Jalili. Conflict detection and resolution in context-aware authorization. In 21st International Conference on Advanced Information Networking and Applications Workshops, May 2007.
20. P. Mazzoleni, B. Crispo, S. Sivasubramanian, and E. Bertino. Xacml policy integration algorithms. In ACM Transactions on Information and System Security (TISSEC), pages 852-869, February 2008.
21. A. Mohan, D. Bauer, D. Blough, M. Ahamad, B. Bamba, R. Krishnan, L. Liu, D. Mashima, and B. Palanisamy. A patient-centric, attribute-based, source-verifiable framework for health record sharing. CERCS Tech Report GIT-CERCS-09-11, Georgia Tech, 2009.
22. L. Ngo and A. Apon. Using shibboleth for authorization and authentication to the subversion version control repository system. In IEEE ITNG, 2007.
23. P. Rao, D. Lin, E. Bertino, N. Li, and J. Lobo. An algebra for fine-grained integration of xacml policies. In CERIAS Tech Report 2008-21, Purdue University, 2008.
24. M. Rouached and C. Godart. Reasoning about events to specify authorization policies for web services composition. In IEEE International Conference on Web Services (ICWS), September 2007.
25. F. Turkmen and B. Crispo. Performance evaluation of xacml pdp implementations. In ACM workshop on Secure Web Services, October 2008.
26. W. Yu and E. Nayak. An algorithmic approach to authorization rules conflict resolution in software security. In Annual IEEE International Computer Software and Applications Conference, July 2008.