Policy administration in tag-based authorization

Sandro Etalle; Timothy L. Hinrichs; Adam J. Lee; Daniel Trivellato; Nicola Zannone

doi:10.1007/978-3-642-37119-6_11

Policy administration in tag-based authorization

Sandro Etalle, Timothy L. Hinrichs, Adam J. Lee, Daniel Trivellato, Nicola Zannone

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Citations (Scopus)

83 Downloads (Pure)

Abstract

Tag-Based Authorization (TBA) is a hybrid access control model that combines the ease of use of extensional access control models with the expressivity of logic-based formalisms. The main limitation of TBA is that it lacks support for policy administration. More precisely, it does not allow policy-writers to specify administrative policies that constrain the tags that users can assign, and to verify the compliance of assigned tags with these policies. In this paper we introduce TBA2 (Tag-Based Authorization & Administration), an extension of TBA that enables policy administration in distributed systems. We show that TBA2 is more expressive than TBA and than two reference administrative models proposed in the literature, namely HRU and ARBAC97.

Original language	Undefined
Title of host publication	5th International Symposium on Foundations and Practice of Security, FPS 2012
Place of Publication	Berlin
Publisher	Springer
Pages	162-179
Number of pages	18
ISBN (Print)	978-3-642-37119-6
DOIs	https://doi.org/10.1007/978-3-642-37119-6_11
Publication status	Published - 2013
Event	5th International Symposium on Foundations and Practice of Security 2012 - Montreal, Canada Duration: 25 Oct 2012 → 26 Oct 2012 Conference number: 5 http://conferences.telecom-bretagne.eu/fps2012/

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer Verlag
Volume	7743
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	5th International Symposium on Foundations and Practice of Security 2012
Abbreviated title	FPS 2012
Country/Territory	Canada
City	Montreal
Period	25/10/12 → 26/10/12
Internet address	http://conferences.telecom-bretagne.eu/fps2012/

Keywords

EWI-23344
SCS-Cybersecurity
policy administration
IR-86128
Access Control
METIS-297634
auditing

Access to Document

10.1007/978-3-642-37119-6_11

Cite this

@inproceedings{929536cde305499dbc4bcafbdd90a4e1,

title = "Policy administration in tag-based authorization",

abstract = "Tag-Based Authorization (TBA) is a hybrid access control model that combines the ease of use of extensional access control models with the expressivity of logic-based formalisms. The main limitation of TBA is that it lacks support for policy administration. More precisely, it does not allow policy-writers to specify administrative policies that constrain the tags that users can assign, and to verify the compliance of assigned tags with these policies. In this paper we introduce TBA2 (Tag-Based Authorization & Administration), an extension of TBA that enables policy administration in distributed systems. We show that TBA2 is more expressive than TBA and than two reference administrative models proposed in the literature, namely HRU and ARBAC97.",

keywords = "EWI-23344, SCS-Cybersecurity, policy administration, IR-86128, Access Control, METIS-297634, auditing",

author = "Sandro Etalle and Hinrichs, {Timothy L.} and Lee, {Adam J.} and Daniel Trivellato and Nicola Zannone",

note = "10.1007/978-3-642-37119-6_11 ; 5th International Symposium on Foundations and Practice of Security 2012 ; Conference date: 25-10-2012 Through 26-10-2012",

year = "2013",

doi = "10.1007/978-3-642-37119-6_11",

language = "Undefined",

isbn = "978-3-642-37119-6",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "162--179",

booktitle = "5th International Symposium on Foundations and Practice of Security, FPS 2012",

url = "http://conferences.telecom-bretagne.eu/fps2012/",

}

Etalle, S, Hinrichs, TL, Lee, AJ, Trivellato, D & Zannone, N 2013, Policy administration in tag-based authorization. in 5th International Symposium on Foundations and Practice of Security, FPS 2012. Lecture Notes in Computer Science, vol. 7743, Springer, Berlin, pp. 162-179, 5th International Symposium on Foundations and Practice of Security 2012, Montreal, Canada, 25/10/12. https://doi.org/10.1007/978-3-642-37119-6_11

Policy administration in tag-based authorization. / Etalle, Sandro; Hinrichs, Timothy L.; Lee, Adam J. et al.
5th International Symposium on Foundations and Practice of Security, FPS 2012. Berlin: Springer, 2013. p. 162-179 (Lecture Notes in Computer Science; Vol. 7743).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Policy administration in tag-based authorization

AU - Etalle, Sandro

AU - Hinrichs, Timothy L.

AU - Lee, Adam J.

AU - Trivellato, Daniel

AU - Zannone, Nicola

N1 - Conference code: 5

PY - 2013

Y1 - 2013

N2 - Tag-Based Authorization (TBA) is a hybrid access control model that combines the ease of use of extensional access control models with the expressivity of logic-based formalisms. The main limitation of TBA is that it lacks support for policy administration. More precisely, it does not allow policy-writers to specify administrative policies that constrain the tags that users can assign, and to verify the compliance of assigned tags with these policies. In this paper we introduce TBA2 (Tag-Based Authorization & Administration), an extension of TBA that enables policy administration in distributed systems. We show that TBA2 is more expressive than TBA and than two reference administrative models proposed in the literature, namely HRU and ARBAC97.

AB - Tag-Based Authorization (TBA) is a hybrid access control model that combines the ease of use of extensional access control models with the expressivity of logic-based formalisms. The main limitation of TBA is that it lacks support for policy administration. More precisely, it does not allow policy-writers to specify administrative policies that constrain the tags that users can assign, and to verify the compliance of assigned tags with these policies. In this paper we introduce TBA2 (Tag-Based Authorization & Administration), an extension of TBA that enables policy administration in distributed systems. We show that TBA2 is more expressive than TBA and than two reference administrative models proposed in the literature, namely HRU and ARBAC97.

KW - EWI-23344

KW - SCS-Cybersecurity

KW - policy administration

KW - IR-86128

KW - Access Control

KW - METIS-297634

KW - auditing

U2 - 10.1007/978-3-642-37119-6_11

DO - 10.1007/978-3-642-37119-6_11

M3 - Conference contribution

SN - 978-3-642-37119-6

T3 - Lecture Notes in Computer Science

SP - 162

EP - 179

BT - 5th International Symposium on Foundations and Practice of Security, FPS 2012

PB - Springer

CY - Berlin

T2 - 5th International Symposium on Foundations and Practice of Security 2012

Y2 - 25 October 2012 through 26 October 2012

ER -