NDLI: Strategies for Reducing Risks of Inconsistencies in Access Control Policies

Content Provider	IEEE Xplore Digital Library
Author	Stepien, B. Matwin, S. Felty, A.
Copyright Year	2010
Abstract	Managing access control policies is a complex task. We argue that much of the complexity is unnecessary and mostly due to historical reasons. There are number of legacy policy specification languages that all have limitations of some kind. These limitations have forced policy implementers to use certain styles of writing policies, often resulting in inconsistencies. The detection and resolution of these inconsistencies has been widely researched and many solutions have been found. This paper highlights new possibilities for avoiding inconsistencies, drawing on the expressive power allowed in the condition field of rules in modern languages such as XACML. In particular, we show that making use of this expressive power has many advantages—it allows organizations to considerably reduce the number of policies and rules required to protect company assets; it provides improved views and summaries of related policies; and it allows increased scalability of analysis tools, such as tools that detect inconsistencies and tools that perform audits to verify compliance to regulations. Such tools are increasingly important in the current environment where the number of regulations governing company security continues to grow. In addition, we show how our user-friendly representation for the XACML language facilitates the use of complex conditions by increasing their readability. This increased readability has the additional benefit of allowing non-technical users to better understand the implementation of their policies. These factors all contribute to a lower risk of inconsistencies in policies.
Starting Page	140
Ending Page	147
File Size	280001
Page Count	8
File Format	PDF
ISBN	9781424458790
e-ISBN	9781424458806
DOI	10.1109/ARES.2010.72
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-02-15
Publisher Place	Poland
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Access control Availability Standardization Reliability engineering access control management Information technology XACML policy conflict detection Computer science policy management workbench Information security Writing Logic Computer security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Strategies for reducing risks of inconsistencies in access control policies.

Implementing ACL-Based Policies in XACML

Detection of Task-Conflict of Task and Role Based Access Control Model for Workflow

A Conflict Detection Approach for XACML Policies on Hierarchical Resources

An Algorithm for Compression of XACML Access Control Policy Sets by Recursive Subsumption

Assessing Quality of Policy Properties in Verification of Access Control Policies

Available Separation-of-Duty Policies in Access Control

Privacy-Aware Role Based Access Control Model: Revisited for Multi-Policy Conflict Detection

Composing Administrative Scope of Delegation Policies based on extended XACML

Strategies for Reducing Risks of Inconsistencies in Access Control Policies

Similar Documents

Strategies for reducing risks of inconsistencies in access control policies.

Implementing ACL-Based Policies in XACML

Detection of Task-Conflict of Task and Role Based Access Control Model for Workflow

A Conflict Detection Approach for XACML Policies on Hierarchical Resources

An Algorithm for Compression of XACML Access Control Policy Sets by Recursive Subsumption

Assessing Quality of Policy Properties in Verification of Access Control Policies

Available Separation-of-Duty Policies in Access Control

Privacy-Aware Role Based Access Control Model: Revisited for Multi-Policy Conflict Detection

Composing Administrative Scope of Delegation Policies based on extended XACML

Strategies for Reducing Risks of Inconsistencies in Access Control Policies