Realizing policy verification subsystems for access control systems

点击翻译按钮获取中文摘要

Regulating users' accesses to resources, access control, is one of the most important aspects of security. The administration of large access control systems is challenging, and centralized approaches do not scale. Decentralized approaches introduce the risk that security policies are violated. A resolution to this is to complement access control with policy verification that tells a trusted administrator the consequences (e.g., related to safety, availability and mutual exclusion) of leaving the system in a particular state. I will address foundational and applied problems that stand in the way of realizing policy verification subsystems for access control. The proposed work will provide research and educational training to students on one of the most important aspects of information security. Information systems in Canada will benefit from the new technology that is developed that will make access control scalable, robust and usable.