On practical specification and enforcement of obligations

CODASPY'12 - Proceedings of the 2nd ACM Conference on Data and Application Security and Privacy

Volumn , Issue , 2012, Pages 71-82

  Li, Ninghui ^a   Chen, Haining ^a   Bertino, Elisa ^a  

^a Purdue University   (United States)

Author keywords

architecture; obligation policy; XACML

Indexed keywords

ACCESS CONTROL; CONTROL SYSTEMS; COPYRIGHTS; INFORMATION MANAGEMENT; MEDICAL COMPUTING;

'CURRENT; ACCESS CONTROL POLICIES; ACCESS CONTROL SYSTEMS; BLACK BOXES; DE FACTO STANDARD; DIGITAL RIGHTS MANAGEMENT; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; OBLIGATION POLICY; REAL-WORLD; XACML;

SPECIFICATIONS;

EID: 85092057840     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2133601.2133611     Document Type: Conference Paper

References (21)

1. C. Bettini, S. Jajodia, X. Wang, and D. Wijesekera. Obligation monitoring in policy management. In Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'03), 2003.
2. C. Bettini, S. Jajodia, X. S. Wang, and D. Wijesekera. Provisions and obligations in policy management and security applications. In Proceedings of the 28th international conference on Very Large Data Bases, pages 502-513, 2002.
3. C. Bettini, S. Jajodia, X. S. Wang, and D. Wijesekera. Provisions and obligations in policy rule management. J. Netw. Syst. Manage., 11: 351-372, 2003.
4. P. Gama and P. Ferreira. Obligation policies: An enforcement platform. In Proceedings of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks, 2005.
5. K. Irwin, T. Yu, and W. H. Winsborough. On the modeling and analysis of obligations. In Proceedings of the 13th ACM conference on Computer and communications security, CCS '06, pages 134-143, 2006.
6. K. Irwin, T. Yu, and W. H. Winsborough. Assigning responsibility for failed obligations. IFIP International Federation for Information Processing, 263: 327-342, 2008.
7. L. Kagal, T. Finin, and A. Joshi. A policy language for a pervasive computing environment. In Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY '03, 2003.
8. B. Katt, X. Zhang, R. Breu, M. Hafner, and J.-P. Seifert. A general obligation model and continuity: Enhanced policy enforcement engine for usage control. In Proceedings of the 13th ACM symposium on Access control models and technologies, pages 123-132, 2008.
9. I. Z. R. Laboratory. The enterprise privacy authorization language (EPAL 1. 1). Avaiable at http://www. zurich. ibm. com/pri/projects/epal. html.
10. M. Lischka. Dynamic obligation specification and negotiation. In 12th IEEE/IFIP Network Operations and Management Symposium (NOMS 2010), pages 155-162, Osaka, Japan, Apr. 2010. IEEE.
11. E. L. N. Damianou, N. Dulay and M. Sloman. The ponder policy specification language. In Proc. Policy 2001: Workshop on Policies for Distributed Systems and Networks, pages 18-39, 2001.
12. J. Park and R. Sandhu. Towards usage control models: Beyond traditional access control. In Proceedings of the seventh ACM symposium on Access control models and technologies, pages 57-64, 2002.
13. J. Park and R. Sandhu. The UCONABC usage control model. ACM Trans. Inf. Syst. Secur., 7 (1): 128-174, February 2004.
14. M. Pontual, O. Chowdhury, W. H. Winsborough, T. Yu, and K. Irwin. Toward practical authorization-dependent user obligation systems. In Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, ASIACCS '10, 2010.
15. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63 (9), 1975.
16. R. Sandhu and J. Park. Usage control: A vision for next generation access control. In Inter. Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security, 2003.
17. Sun. Sun's XACML implementation. Avaiable at http://sunxacml. sourceforge. net/index. html.
18. X. TC. Extensible access control markup language (XACML) version 2. 0. OASIS Standard, 2005. Avaiable at http://www. oasis-open. org/committees/xacml/.
19. X. TC. Extensible access control markup language (XACML) version 3. 0 (draft). 2010. Avaiable at http://www. oasis-open. org/committees/xacml/.
20. A. Uszok, J. Bradshaw, R. Jeffers, N. Suri, P. Hayes, M. Breedy, L. Bunch, M. Johnson, S. Kulkarni, and J. Lott. KAoS policy and domain services: Toward a description-logic approach to policy representation, deconfliction, and enforcement. In Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY '03, 2003.
21. X. Zhang, F. Parisi-Presicce, R. Sandhu, and J. Park. Formal model and policy specification of usage control. ACM Trans. Inf. Syst. Secur., 8 (4): 351-387, November 2005.