Refinement for Administrative Policies

M.A.C. Dekker; S. Etalle

doi:10.1007/978-3-540-75248-6_3

Refinement for Administrative Policies

M.A.C. Dekker, S. Etalle

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

2 Downloads (Pure)

Abstract

Flexibility of management is an important requisite for access control systems as it allows users to adapt the access control system in accordance with practical requirements. This paper builds on earlier work where we defined administrative policies for a general class of RBAC models. We present a formal definition of administrative refinement and we show that there is an ordering for administrative privileges which yields administrative refinements of policies. We argue (by giving an example) that this privilege ordering can be very useful in practice, and we prove that the privilege ordering is tractable.

Original language	English
Title of host publication	Secure Data Management
Subtitle of host publication	4th VLDB Workshop, SDM 2007, Vienna, Austria, September 23-24, 2007. Proceedings
Editors	Willem Jonker, Milan Petković
Place of Publication	Berlin
Publisher	Springer
Pages	33-46
Number of pages	15
ISBN (Electronic)	978-3-540-75248-6
ISBN (Print)	978-3-540-75247-9
DOIs	https://doi.org/10.1007/978-3-540-75248-6_3
Publication status	Published - Sept 2007
Event	4th VLDB Workshop on Secure Data Management, SDM 2007 - Vienna, Austria Duration: 23 Sept 2007 → 24 Sept 2007 Conference number: 4

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	4721
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Workshop

Workshop	4th VLDB Workshop on Secure Data Management, SDM 2007
Abbreviated title	SDM
Country/Territory	Austria
City	Vienna
Period	23/09/07 → 24/09/07

Keywords

SCS-Cybersecurity
Access control
Access control policy
Access control model
Access control system
Administrative policy

Access to Document

10.1007/978-3-540-75248-6_3

http://eprints.eemcs.utwente.nl/secure2/11154/01/fulltext.pdf

Cite this

@inproceedings{e1cd35522c7440fe93bfe9c197a73644,

title = "Refinement for Administrative Policies",

abstract = "Flexibility of management is an important requisite for access control systems as it allows users to adapt the access control system in accordance with practical requirements. This paper builds on earlier work where we defined administrative policies for a general class of RBAC models. We present a formal definition of administrative refinement and we show that there is an ordering for administrative privileges which yields administrative refinements of policies. We argue (by giving an example) that this privilege ordering can be very useful in practice, and we prove that the privilege ordering is tractable.",

keywords = "SCS-Cybersecurity, Access control, Access control policy, Access control model, Access control system, Administrative policy",

author = "M.A.C. Dekker and S. Etalle",

year = "2007",

month = sep,

doi = "10.1007/978-3-540-75248-6_3",

language = "English",

isbn = "978-3-540-75247-9",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "33--46",

editor = "Willem Jonker and Milan Petkovi{\'c}",

booktitle = "Secure Data Management",

address = "Germany",

note = "4th VLDB Workshop on Secure Data Management, SDM 2007, SDM ; Conference date: 23-09-2007 Through 24-09-2007",

}

Dekker, MAC & Etalle, S 2007, Refinement for Administrative Policies. in W Jonker & M Petković (eds), Secure Data Management: 4th VLDB Workshop, SDM 2007, Vienna, Austria, September 23-24, 2007. Proceedings. Lecture Notes in Computer Science, vol. 4721, Springer, Berlin, pp. 33-46, 4th VLDB Workshop on Secure Data Management, SDM 2007, Vienna, Austria, 23/09/07. https://doi.org/10.1007/978-3-540-75248-6_3

Refinement for Administrative Policies. / Dekker, M.A.C.; Etalle, S.
Secure Data Management: 4th VLDB Workshop, SDM 2007, Vienna, Austria, September 23-24, 2007. Proceedings. ed. / Willem Jonker; Milan Petković. Berlin: Springer, 2007. p. 33-46 (Lecture Notes in Computer Science; Vol. 4721).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Refinement for Administrative Policies

AU - Dekker, M.A.C.

AU - Etalle, S.

N1 - Conference code: 4

PY - 2007/9

Y1 - 2007/9

N2 - Flexibility of management is an important requisite for access control systems as it allows users to adapt the access control system in accordance with practical requirements. This paper builds on earlier work where we defined administrative policies for a general class of RBAC models. We present a formal definition of administrative refinement and we show that there is an ordering for administrative privileges which yields administrative refinements of policies. We argue (by giving an example) that this privilege ordering can be very useful in practice, and we prove that the privilege ordering is tractable.

AB - Flexibility of management is an important requisite for access control systems as it allows users to adapt the access control system in accordance with practical requirements. This paper builds on earlier work where we defined administrative policies for a general class of RBAC models. We present a formal definition of administrative refinement and we show that there is an ordering for administrative privileges which yields administrative refinements of policies. We argue (by giving an example) that this privilege ordering can be very useful in practice, and we prove that the privilege ordering is tractable.

KW - SCS-Cybersecurity

KW - Access control

KW - Access control policy

KW - Access control model

KW - Access control system

KW - Administrative policy

U2 - 10.1007/978-3-540-75248-6_3

DO - 10.1007/978-3-540-75248-6_3

M3 - Conference contribution

SN - 978-3-540-75247-9

T3 - Lecture Notes in Computer Science

SP - 33

EP - 46

BT - Secure Data Management

A2 - Jonker, Willem

A2 - Petković, Milan

PB - Springer

CY - Berlin

T2 - 4th VLDB Workshop on Secure Data Management, SDM 2007

Y2 - 23 September 2007 through 24 September 2007

ER -

Refinement for Administrative Policies

Abstract

Publication series

Workshop

Keywords

Access to Document

Fingerprint

Cite this