Access Control Policy Analysis Using Free Variable Tableaux
Access Control Policy Analysis Using Free Variable Tableaux
复制标题
使用自由变量 Tableaux 进行访问控制策略分析
DOI：
--
复制
发表时间：
2006
期刊：
影响因子：
--
通讯作者：
M. Sloman
中科院分区：
文献类型：
--
作者：
H. Kamoda;M. Yamaoka;S. Matsuda;K. Broda;M. Sloman
<$<$针对大型、多组织应用程序的访问控制策略规范是困难且容易出错的。对大量实体的访问进行细粒度控制需要复杂的策略，这导致不同的安全管理员指定了许多策略。已经提出了诸如基于角色的访问控制（RBAC）之类的技术来对策略进行分组，并提供用于基于角色层次结构来继承策略的框架。但是，RBAC不能防止策略规范中出现的不一致和冲突，这可能导致信息泄漏或阻止所需的访问。本文提出了一种使用自由变量tableaux的方法来检测由各种类型的授权和约束策略组合而产生的冲突和冗余策略。该方法使用静态分析来实现模态和静态约束策略冲突的完整检测。
†† † †† †† The specification of access control policies for large, multi-organization applications is difficult and error-prone. Sophisticated policies are needed for fine-grained control of access to large numbers of entities, resulting in many policies specified by different security administrators. Techniques such as role based access control (RBAC) have been proposed to group policies and provide a framework for inheriting policies based on role hierarchies. RBAC does not prevent inconsistencies and conflicts arising in the policy specifications, though, which can lead to information leaks or prevent required access. This paper proposes an approach using free variable tableaux to detect conflicts and redundant policies resulting from the combination of various types of authorization and constraint policies. This approach uses static analysis to enable complete detection of modality and static constraint policy conflicts.