NDLI: A white-box policy analysis and its efficient implementation

Please wait, while we are loading the content...

Mobile security and privacy: the quest for the mighty access control

Privacy promises that can be kept: a policy analysis method with application to the HIPAA privacy rule

Evolving role definitions through permission invocation patterns

Panel on granularity in access control

Searching over encrypted data in cloud systems

Information flow control for stream processing in clouds

Heuristic safety analysis of access control models

A bigData platform for analytics on access control policies and logs

A storage-efficient cryptography-based access control solution for subversion

A versatile access control implementation: secure box

Combining social authentication and untrusted clouds for private location sharing

Ensuring continuous compliance through reconciling policy with usage

An information flow control meta-model

A white-box policy analysis and its efficient implementation

Enabling intensional access control via preference-aware query optimization

Beyond accountability: using obligations to reduce risk exposure and deter insider attacks

Permission path analysis based on access intelligence

Private data warehouse queries

Least-restrictive enforcement of the Chinese wall security policy

HyXAC: a hybrid approach for XML access control

On the notion of redundancy in access control policies

RMiner: a tool set for role mining

Property-testing real-world authorization systems

Sticky policies for mobile devices

Constraint expressions and workflow satisfiability

ERBAC: event-driven RBAC

Specification and analysis of access control policies for mobile applications

Secure benchmarking in the cloud

User-centric management of distributed credential repositories: balancing availability and vulnerability

Content-based information protection and release in NATO operations

A white-box policy analysis and its efficient implementation

Content Provider	ACM Digital Library
Author	Fong, Philip W.L. Balasubramaniam, Jayalakshmi
Abstract	In policy composition frameworks, such as XACML, composite policies can be formed by the application of policy composition algorithms (PCAs), which combine authorization decisions of component policies. Understanding the behaviour of composite policies is a non-trivial endeavour, but instrumental in the engineering of correct access control policies. Existing policy analyses take a black-box approach, in which the global behaviour of the composite policy is assessed. A black-box approach is useful for detecting the presence of erroneous behaviour, but not particularly useful for locating the source of the error. In this work, we propose a white-box policy analysis, known as Decision in Context (DIC), that assesses the behaviour of component policies situated in a composite policy. We show that the DIC query can be applied to facilitate policy change impact analysis, break-glass reduction analysis, dead policy identification, as well as the pruning of redundant subpolicies. For generality, the DIC query is defined in an XACML-style policy composition framework that is agnostic of the underlying access control model. The DIC query is implemented via a reduction to either propositional satisfiability (SAT) or pseudo boolean satisfiability (PBS) instances, after which standard solvers can be invoked to complete the evaluation. Empirical analyses have been conducted to compare the relative efficiency of the SAT and PBS encodings. The latter is found to be a more effective encoding, especially for composite policies containing majority-voting PCAs.
Starting Page	149
Ending Page	160
Page Count	12
File Format	PDF
ISBN	9781450319508
DOI	10.1145/2462410.2462416
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-06-12
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Policy composition Policy pruning Change impact analysis Pseudo boolean satisfiability Break-glass reduction Propositional satisfiability Xacml White-box testing Policy analysis Dead policy
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A white-box policy analysis and its efficient implementation.

Integration: Boolean 1

Multiple-implementation testing for XACML implementations

Haplotype inference with boolean satisfiability (2007).

A fast pseudo-boolean constraint solver

A davis-putnam based enumeration algorithm for linear pseudo-boolean optimization (1995).

Boolean satisfiability for sequence mining

Qubos: Deciding Quantified Boolean Logic using Propositional Satisfiability Solvers (2002)

Qubos: Deciding Quantified Boolean Logic using Propositional Satisfiability Solvers (2002)

A white-box policy analysis and its efficient implementation

Similar Documents

A white-box policy analysis and its efficient implementation.

Integration: Boolean 1

Multiple-implementation testing for XACML implementations

Haplotype inference with boolean satisfiability (2007).

A fast pseudo-boolean constraint solver

A davis-putnam based enumeration algorithm for linear pseudo-boolean optimization (1995).

Boolean satisfiability for sequence mining

Qubos: Deciding Quantified Boolean Logic using Propositional Satisfiability Solvers (2002)

Qubos: Deciding Quantified Boolean Logic using Propositional Satisfiability Solvers (2002)

A white-box policy analysis and its efficient implementation