Matches in SemOpenAlex for { <https://semopenalex.org/work/W2496897235> ?p ?o ?g. }
- W2496897235 abstract "The wide proliferation of the Internet has set new requirements for access control policy specification. Due to the demand for ad-hoc cooperation between organisations, applications are no longer isolated from each other; consequently, access control policies face a large, heterogeneous, and dynamic environment. Policies, while maintaining their main functionality, go through many minor adaptations, evolving as the environment changes. In this thesis we investigate the long-term administration of role-based access control (RBAC) – in particular OASIS RBAC – policies. With the aim of encapsulating persistent goals of policies we introduce extensions in the form of meta-policies. These meta-policies, whose expected lifetime is longer than the lifetime of individual policies, contain extra information and restrictions about policies. It is expected that successive policy versions are checked at policy specification time to ensure that they comply with the requirements and guidelines set by meta-policies. In the first of the three classes of meta-policies we group together policy components by annotating them with context labels. Based on this grouping and an information flow relation on context labels, we limit the way in which policy components may be connected to other component groups. We use this to partition conceptually disparate portions of policies, and reference these coherent portions to specify policy restrictions and policy enforcement behaviour. In our second class of meta-policies – compliance policies – we specify requirements on an abstract policy model. We then use this for static policy checking. As compliance tests are performed at policy specification time, compliance policies may include restrictions that either cannot be included in policies, or whose inclusion would result in degraded policy enforcement performance. We also indicate how to use compliance policies to provide information about organisational policies without disclosing sensitive information. The final class of our meta-policies, called interface policies, is used to help set up and maintain cooperation among organisations by enabling them to use components from each other’s policies. Being based on compliance policies, they use an abstract policy component model, and can also specify requirements for both component exporters and importers. Using such interface policies we can reconcile compatibility issues between cooperating parties automatically. Finally, building on our meta-policies, we consider policy evolution and self-administration, according to which we treat RBAC policies as distributed resources to which access is specified with the help of RBAC itself. This enables environments where policies are maintained by many administrators who have varying levels of competence, trust, and jurisdiction. We have tested all of these concepts in Desert, our proof of concept implementation." @default.
- W2496897235 created "2016-08-23" @default.
- W2496897235 creator A5045368299 @default.
- W2496897235 date "2004-01-01" @default.
- W2496897235 modified "2023-10-05" @default.
- W2496897235 title "Role-based access control policy administration" @default.
- W2496897235 cites W13024833 @default.
- W2496897235 cites W1480385994 @default.
- W2496897235 cites W1492040236 @default.
- W2496897235 cites W1496762705 @default.
- W2496897235 cites W1501265984 @default.
- W2496897235 cites W1508163308 @default.
- W2496897235 cites W1517529249 @default.
- W2496897235 cites W1526098002 @default.
- W2496897235 cites W1529467654 @default.
- W2496897235 cites W1541857386 @default.
- W2496897235 cites W1563761628 @default.
- W2496897235 cites W1579312563 @default.
- W2496897235 cites W1586550440 @default.
- W2496897235 cites W1624532646 @default.
- W2496897235 cites W1653629541 @default.
- W2496897235 cites W169137397 @default.
- W2496897235 cites W1824215999 @default.
- W2496897235 cites W1968694351 @default.
- W2496897235 cites W1970808757 @default.
- W2496897235 cites W1971189041 @default.
- W2496897235 cites W1972241288 @default.
- W2496897235 cites W1975156286 @default.
- W2496897235 cites W1979711649 @default.
- W2496897235 cites W1983845548 @default.
- W2496897235 cites W1984488617 @default.
- W2496897235 cites W1987560946 @default.
- W2496897235 cites W1987960589 @default.
- W2496897235 cites W1988654947 @default.
- W2496897235 cites W1991895580 @default.
- W2496897235 cites W1992761401 @default.
- W2496897235 cites W1997199359 @default.
- W2496897235 cites W1998208223 @default.
- W2496897235 cites W2000266971 @default.
- W2496897235 cites W2000952251 @default.
- W2496897235 cites W2001176075 @default.
- W2496897235 cites W2002217674 @default.
- W2496897235 cites W2005379079 @default.
- W2496897235 cites W2007999111 @default.
- W2496897235 cites W2008520402 @default.
- W2496897235 cites W2012419258 @default.
- W2496897235 cites W2012849092 @default.
- W2496897235 cites W2014204110 @default.
- W2496897235 cites W2015432046 @default.
- W2496897235 cites W2016758618 @default.
- W2496897235 cites W2019295012 @default.
- W2496897235 cites W2021549041 @default.
- W2496897235 cites W2023300255 @default.
- W2496897235 cites W2033685455 @default.
- W2496897235 cites W2038790802 @default.
- W2496897235 cites W2040023747 @default.
- W2496897235 cites W2043672663 @default.
- W2496897235 cites W2043978338 @default.
- W2496897235 cites W2044217305 @default.
- W2496897235 cites W2046154373 @default.
- W2496897235 cites W2053843411 @default.
- W2496897235 cites W2056387579 @default.
- W2496897235 cites W2057345152 @default.
- W2496897235 cites W2059437445 @default.
- W2496897235 cites W2060690494 @default.
- W2496897235 cites W2061212428 @default.
- W2496897235 cites W2063838657 @default.
- W2496897235 cites W2065762849 @default.
- W2496897235 cites W2067106503 @default.
- W2496897235 cites W2068239646 @default.
- W2496897235 cites W2070529075 @default.
- W2496897235 cites W2076004681 @default.
- W2496897235 cites W2078738124 @default.
- W2496897235 cites W2081041822 @default.
- W2496897235 cites W2082929066 @default.
- W2496897235 cites W2084621663 @default.
- W2496897235 cites W2087959579 @default.
- W2496897235 cites W2092064278 @default.
- W2496897235 cites W2092516658 @default.
- W2496897235 cites W2093936441 @default.
- W2496897235 cites W2093940769 @default.
- W2496897235 cites W2094873755 @default.
- W2496897235 cites W2096814801 @default.
- W2496897235 cites W2097454402 @default.
- W2496897235 cites W2097740976 @default.
- W2496897235 cites W2100798283 @default.
- W2496897235 cites W2102398950 @default.
- W2496897235 cites W2102412856 @default.
- W2496897235 cites W2108701768 @default.
- W2496897235 cites W2110491615 @default.
- W2496897235 cites W2110723603 @default.
- W2496897235 cites W2111753337 @default.
- W2496897235 cites W2113467413 @default.
- W2496897235 cites W2114357424 @default.
- W2496897235 cites W2115106301 @default.
- W2496897235 cites W2117826841 @default.
- W2496897235 cites W2120563715 @default.
- W2496897235 cites W2123102905 @default.
- W2496897235 cites W2123479684 @default.
- W2496897235 cites W2123584724 @default.