Automated Decomposition of Access Control Policies

Su, Linying and Chadwick, David W. and Basden, Andrew and Cunningham, James (2005) Automated Decomposition of Access Control Policies. In: Proceeds of 6th IEEE International Workshop on Policies for Distributed Systems and Networks. IEEE Computer Society, Washington, DC, USA pp. 3-13. ISBN 0769522653. (The full text of this publication is not available from this repository)

The full text of this publication is not available from this repository. (Contact us about this Publication)

Abstract

Modern dynamic distributed information systems need access control policies to address controlling access to multiple resources that are distributed. The resources may be considered as a single abstract hierarchical resource. An access control policy at a high level should be able to define who is allowed to use the resources. At lower levels, the policy will address controlling access to concrete resources. By modelling the resource hierarchy, it is possible that low level policies can be automatically produced from the high level policy. These low level policies can then be distributed to the concrete resources that use an existing policy based access control decision system so that the high level policy can be enforced throughout the system. In this paper a model for representing and refining high level policies is presented. Other relevant issues and examples for demonstrating the capability of the policy decomposition

Item Type: Conference or workshop item (Paper)
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Faculties > Science Technology and Medical Studies > School of Computing > Security Group
Faculties > Science Technology and Medical Studies > School of Computing > Systems Architecture Group
Depositing User: Mark Wheadon
Date Deposited: 24 Nov 2008 18:03
Last Modified: 30 Jun 2014 13:39
Resource URI: http://kar.kent.ac.uk/id/eprint/14312 (The current URI for this page, for reference purposes)
  • Depositors only (login required):