NDLI: Policy analysis for administrative role based access control

Content Provider	IEEE Xplore Digital Library
Author	Sasturkar, A. Ping Yang Stoller, S.D. Ramakrishnan, C.R.
Copyright Year	2006
Description	Author affiliation: Dept. of Comput. Sci., Stony Brook Univ., NY (Sasturkar, A.; Ping Yang; Stoller, S.D.; Ramakrishnan, C.R.)
Abstract	Role-based access control (RBAC) is a widely used model for expressing access control policies. In large organizations, the RBAC policy may be collectively managed by many administrators. Administrative RBAC (ARBAC) is a model for expressing the authority of administrators, thereby specifying how an organization's RBAC policy may change. Changes by one administrator may interact in unintended ways with changes by other administrators. Consequently, the effect of an ARBAC policy is hard to understand by simple inspection. In this paper, we consider the problem of analyzing ARBAC policies, in particular to determine reachability properties (e.g., whether a user can eventually be assigned to a role by a group of administrators) and availability properties (e.g., whether a user cannot be removed from a role by a group of administrators) implied by a policy. We first establish the connection between security policy analysis and planning in artificial intelligence. Based partly on this connection, we show that reachability analysis for ARBAC is PSPACE-complete. We also give algorithms and complexity results for reachability and related analysis problems for several categories of ARBAC policies, defined by simple restrictions on the policy language
Sponsorship	IEEE Comput. Soc. Tech. Comm. on Security and Privacy
Starting Page	13
Ending Page	138
File Size	372148
Page Count	126
File Format	PDF
ISBN	0769526152
ISSN	10636900
DOI	10.1109/CSFW.2006.22
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-07-05
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Inspection Permission Computer science Electronic mail Availability Security Artificial intelligence Reachability analysis Algorithm design and analysis
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Policy analysis for administrative role based access control (2006)

Efficient policy analysis for administrative role based access control (2007)

Symbolic reachability analysis for parameterized administrative role based access control

Policy analysis for administrative role based access control (2006)

Specification and Analysis of Dynamic Authorisation Policies

Abductive Analysis of Administrative Policies in Rule-based Access Control

1 abductive analysis of administrative policies in rule-based access control.

Extending role-based access control model with states

Owner-Based Role-Based Access Control OB-RBAC

Policy analysis for administrative role based access control

Similar Documents

Policy analysis for administrative role based access control (2006)

Efficient policy analysis for administrative role based access control (2007)

Symbolic reachability analysis for parameterized administrative role based access control

Policy analysis for administrative role based access control (2006)

Specification and Analysis of Dynamic Authorisation Policies

Abductive Analysis of Administrative Policies in Rule-based Access Control

1 abductive analysis of administrative policies in rule-based access control.

Extending role-based access control model with states

Owner-Based Role-Based Access Control OB-RBAC

Policy analysis for administrative role based access control