Access Control Management and Scurity in a Heterogeneous Multidomain Environment

该项目将开发一个全面的安全管理框架，使用异类多域环境中分布式应用程序的访问控制模型。这样的系统预计将在广泛的基于Web的应用程序中发挥关键作用。拟议的框架将建立在基于角色的访问控制(RBAC)模型的基础上。使用角色进行安全管理有几个公认的优势。其中值得注意的是，它们可以灵活地代表关键的组织职能，同时直接支持组织的安全策略。由于分布式应用程序的动态特性和底层多域环境的异构性，拟议的框架的开发带来了几个令人生畏的挑战。该方案所涉及的主要挑战包括：-建立一个包含时间约束的基于PETRI网的动态RBAC模型。这项任务还包括对各种安全策略进行建模，并开发用于评估该模型的正确性标准的有效分析技术。-开发RBAC形式体系，以确保在支持分布式应用的异类多域环境中的安全互操作性。此任务还包括设计最佳中介策略，以管理属于应用程序的域角色和任务之间的冲突。

This project will develop a comprehensive framework for security management using access control models for distributed applications in a heterogeneous multidomain environment. Such systems are expected to play a critical role in a broad range of Web-based applications. The proposed framework will be built upon role-based access control (RBAC) models. The use of roles for security management has several well-recognized advantages. Noted among them is their flexibility in representing key organizational functions while directly supporting the security policies of an organization. Due to the dynamic nature of distributed applications and the heterogeneity aspects of the underlying multidomain environment, development of the proposed framework poses several daunting challenges. The main challenges addressed in this proposal include:-the development of a Petri-net based dynamic RBAC model that incorporates time constraints. This task also includes modeling a variety of security policies and developing efficient analytical techniques for evaluating the correctness criteria for this model.-the development of an RBAC formalism that ensures secure interoperability in a heterogeneous multidomain environment for supporting distributed applications. This task also includes designing optimal mediation policies to manage conflicts among domain roles and tasks belonging to applications.