Easy Expression of Authorisation Policies

授权策略轻松表达

• 批准号: EP/D052424/1
• 负责人: Martina Angela Sasse
• 金额: $ 11.75万
• 依托单位: University College London
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2006
• 资助国家: 英国
• 起止时间: 2006 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FD052424%2F1
• 关键词: Easy; Expression; Authorisation; Policies

The primary purpose of this 20 month long project is to allow Gridmanagers to be able to specify the authorisation policy for access totheir Grid computing resources through the use of controlled naturallanguage. The policy tool will parse the policy, interpret it, and store it in its own internal representation, using a model and ontologydeveloped at the start of the research. The policy tool will prompt themanager to clarify any unclear terms (e.g. what is Fred? Is it afilename or a username?), resolve any ambiguities, and once this hasbeen done will print the policy out in similar natural language, usingwording as near to the original input language as possible. This willallow the manager to see if the computer has fully understood hispolicy, but if not, the manager will need to edit his policy andresubmit it, until the computer's version is identical in meaning to his own. Finally, the tool will compile the policy into two existing XML authorization policy languages (XACML and PERMIS) so that the policy can be automatically fed into existing Grid authorization engines (policy decision points). In this way, we can be assured that the policy that is implemented is the one that the manager intended it to be.

这个为期20个月的项目的主要目的是让网格管理人员能够指定的授权政策，通过使用控制自然语言访问他们的网格计算资源。策略工具将解析策略，解释它，并使用研究开始时开发的模型和本体将其存储在自己的内部表示中。政策工具将提示管理者澄清任何不清楚的术语（例如，什么是Fred？是文件名还是用户名？），解决任何歧义，一旦完成，将以类似的自然语言打印出保单，使用尽可能接近原始输入语言的措辞。这将允许经理查看计算机是否完全理解他的策略，但如果没有，经理将需要编辑他的策略并重新提交，直到计算机的版本与他自己的版本在含义上相同。最后，该工具将把策略编译成两种现有的XML授权策略语言（XACML和PERMIS），这样策略就可以自动地输入到现有的网格授权引擎（策略决策点）中。通过这种方式，我们可以确保所实施的策略是管理者想要的策略。

项目成果

Guiding decisions on authorization policies

指导授权政策决策

• DOI: 10.1145/2245276.2232015
• 发表时间: 2012
• 作者: Bartsch S

How Users Bypass Access Control - And Why: The Impact Of Authorization Problems On Individuals And The Organization

用户如何绕过访问控制 - 以及原因：授权问题对个人和组织的影响

• 发表时间: 2013
• 期刊: European Conference on Information Systems (ECIS) 2013 Completed Research
• 作者: Bartsch S

Expressions of expertness

专业的表达

• DOI: 10.1145/1408664.1408675
• 发表时间: 2008
• 作者: Inglesant P

The Virtuous Circle of Expressing Authorization

表达授权的良性循环

• 发表时间: 2006
• 作者: N/a Chadwick

Expressing Security Policies in Natural Language

用自然语言表达安全策略

• 发表时间: 2008
• 作者: Chadwick