Skip to main content

Self-adaptive federated authorization infrastructures

Bailey, Christopher, Chadwick, David W., de Lemos, Rogerio (2014) Self-adaptive federated authorization infrastructures. Journal of Computer and System Sciences, 80 (5). pp. 935-952. ISSN 0022-0000. (doi:10.1016/j.jcss.2014.02.003) (KAR id:43003)

PDF Pre-print
Language: English
Download (2MB)
[thumbnail of jcss_draft.sophos.pdf]
This file may not be suitable for users of assistive technology.
Request an accessible format
Official URL:


Authorization infrastructures are an integral part of any network where resources need to be protected. As networks expand and organizations start to federate access to their resources, authorization infrastructures become increasingly difficult to manage. In this paper, we explore the automatic adaptation of authorization assets (policies and subject access rights) in order to manage federated authorization infrastructures. We demonstrate adaptation through a Self-Adaptive Authorization Framework (SAAF) controller that is capable of managing policy based federated role/attribute access control authorization infrastructures. The SAAF controller implements a feedback loop to monitor the authorization infrastructure in terms of authorization assets and subject behavior, analyze potential adaptations for handling malicious behavior, and act upon authorization assets to control future authorization decisions. We evaluate a prototype of the SAAF controller by simulating malicious behavior within a deployed federated authorization infrastructure (federation), demonstrating the escalation of adaptation, along with a comparison of SAAF to current technology.

Item Type: Article
DOI/Identification number: 10.1016/j.jcss.2014.02.003
Uncontrolled keywords: Self-adaptation; Authorization; Policy management; Identity management; Autonomic security; RBAC; ABAC; SAML; PERMIS
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
University-wide institutes > Institute of Cyber Security for Society
Depositing User: Rogerio de Lemos
Date Deposited: 17 Sep 2014 13:22 UTC
Last Modified: 09 Dec 2022 03:55 UTC
Resource URI: (The current URI for this page, for reference purposes)
Chadwick, David W.:
de Lemos, Rogerio:
  • Depositors only (login required):


Downloads per month over past year