Cue: A framework for generating meaningful feedback in XACML

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 9-16

  Ghai, Sunil Kumar ^a   Nigam, Prateek ^a   Kumaraguru, Ponnurangam ^b  

^a DELHI TECHNOLOGICAL UNIVERSITY   (India)

^b INDRAPRASTHA INSTITUTE OF INFORMATION TECHNOLOGY   (India)

Author keywords

access control; feedback; policy protection; privacy policy languages; prolog; usable privacy and security; xacml

Indexed keywords

POLICY PROTECTION; PRIVACY POLICIES; PROLOG; USABLE PRIVACY; XACML;

ACCESS CONTROL; LOGIC PROGRAMMING; SECURITY SYSTEMS;

PROLOG (PROGRAMMING LANGUAGE);

EID: 78650080373     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866898.1866901     Document Type: Conference Paper

References (22)

1. A. Anderson. A comparison of two privacy policy languages: Epal and xacml. Technical report, Mountain View, CA, USA, 2005.
2. M. Backes, M. Durmuth, and G. Karjoth. Unification in privacy policy evaluation - translating epal into prolog. Policies for Distributed Systems and Networks, IEEE International Workshop on, 0:185, 2004.
3. A. Barth, J. Mitchell, A. Datta, and S. Sundaram. Privacy and utility in business processes. In CSF '07: Proceedings of the 20th IEEE Computer Security Foundations Symposium, pages 279-294, Washington, DC, USA, 2007. IEEE Computer Society.
4. P. Bonatti, E. Damiani, S. de Capitani, and P. Samarati. A component-based architecture for secure data publication. In ACSAC '01: Proceedings of the 17th Annual Computer Security Applications Conference, page 309, Washington, DC, USA, 2001. IEEE Computer Society.
5. X. Cao and L. Iverson. Intentional access management: making access control usable for end-users. In SOUPS '06: Proceedings of the second symposium on Usable privacy and security, pages 20-31, New York, NY, USA, 2006. ACM.
6. H. Chalupsky and T. A. Russ. Whynot: debugging failed queries in large knowledge bases. In IAAI'02: Proceedings of the 14th conference on Innovative applications of artificial intelligence, pages 870-877. AAAI Press, 2002.
7. J. Crampton, W. Leung, and K. Beznosov. The secondary and approximate authorization model and its application to bell-lapadula policies. In SACMAT '06: Proceedings of the eleventh ACM symposium on Access control models and technologies, pages 111-120, New York, NY, USA, 2006. ACM.
8. T. Das, R. Bhagwan, and P. Naldurg. Baaz: A system for detecting access control misconfigurations. In USENIX Security Symposium, USENIX, 2010.
9. K. Fisler, S. Krishnamurthi, L. A. Meyerovich, and M. C. Tschantz. Verification and change-impact analysis of access-control policies. In ICSE '05. ACM Press, 2005.
10. L. Kagal, C. Hanson, and D. Weitzner. Using dependency tracking to provide explanations for policy management. In POLICY '08: Proceedings of the 2008 IEEE Workshop on Policies for Distributed Systems and Networks, pages 54-61, Washington, DC, USA, 2008. IEEE Computer Society.
11. A. Kapadia, G. Sampemane, and R. H. Campbell. KNOW why your access was denied: Regulating feedback for usable security. In Proceedings of the ACM CCS, 2004.
12. A. Khurat and J. Abendroth. A mechanism for requesting hierarchical documents in xacml. Wireless and Mobile Computing, Networking and Communication, IEEE International Conference on, 0:202-207, 2008.
13. A. X. Liu, F. Chen, J. Hwang, and T. Xie. Xengine: a fast and scalable xacml policy evaluation engine. In SIGMETRICS '08: Proceedings of the 2008 ACM SIGMETRICS international conference on Measurement and modeling of computer systems, pages 265-276, New York, NY, USA, 2008. ACM.
14. M. Lorch, D. Kafura, S. Proctor, and R. Lepro. First experiences using xacml for access control in distributed systems. In in Proceedings of the 2003 ACM workshop on XML security, pages 25-37. ACM Press, 2003.
15. M. Lorch, D. Kafura, and S. Shah. An xacml-based policy management and authorization service for globus resources. In GRID '03: Proceedings of the 4th International Workshop on Grid Computing, page 208, Washington, DC, USA, 2003. IEEE Computer Society.
16. L. Lymberopoulos, E. Lupu, and M. Sloman. An adaptive policy-based framework for network services management. J. Netw. Syst. Manage., 11:277-303, September 2003.
17. T. Moses. XACML Version 2.0. OASIS Standard Specification, February 2005.
18. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. In Proceedings of the IEEE, volume 63, 1975.
19. B. Stepien, A. Felty, and S. Matwin. A Non-technical User-Oriented Display Notation for XACML Conditions. SpringerLink, 2009.
20. J. Wielemaker. An overview of the swi-prolog programming environment. In WLPE, pages 1-16, 2003.
21. C. Wolter, A. Schaad, and C. Meinel. Deriving xacml policies from business process models. In WISE'07: Proceedings of the 2007 international conference on Web information systems engineering, pages 142-153, Berlin, Heidelberg, 2007. Springer-Verlag.
22. M. E. Zurko and R. T. Simon. User-centered security. In NSPW '96: Proceedings of the 1996 workshop on New security paradigms, pages 27-33, New York, NY, USA, 1996. ACM.