A graph-based framework for the analysis of access control policies

• Type: Article in International Scientific Journal
• Date: 2017

Authors

Sandra Alves (Author) FCUP; Fernandez, M (Author) Other

Journal

Title: Theoretical Computer Science

Vol. 685

Pages: 3-22

ISSN: 0304-3975

Publisher: Elsevier

Indexing

ISI Web of Knowledge - 10 Citations

Scopus - 11 Citations

Other information

Authenticus ID: P-00M-C6D

DOI: 10.1016/j.tcs.2016.10.018

Abstract (EN): We design a graph-based framework for the analysis of access control policies that aims at easing the specification and verification tasks for security administrators. We consider policies in the category-based access control model, which has been shown to subsume many of the most well known access control models (e.g., MAC, DAC, RBAC). Using a graphical representation of category-based policies, we show how answers to usual administrator queries can be automatically computed, and properties of access control policies checked. We show applications in the context of emergency situations, where our framework can be used to analyse the interaction between access control and emergency management.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 20