.png){kind=icon}
返回
The Authorization Policy Existence Problem
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2018.2883416.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Constraints such as separation-of-duty are widely used to specify requirements that supplement basic authorization policies. However, the existence of constraints (and authorization policies) may mean that a user is unable to fulfill her/his organizational duties because access to resources has been denied. In short, there is a tension between the need to protect resources (using policies and constraints) and the availability of resources. Recent work on workflow satisfiability and resiliency in access control asks whether this tension compromises the ability of an organization to achieve its objectives. In this paper, we develop a new method of specifying constraints which subsumes much related work and allows a wider range of constraints to be specified. The use of such constraints leads naturally to a range of questions related to policy existence, where a positive answer means that an organization's objectives can be realized. We analyze the complexity of these policy existence questions and, for particular sub-classes of constraints defined by our language, develop fixed-parameter tractable algorithms to solve them.(1) 1. An extended abstract of this paper appeared in the Proceedings of the Seventh ACM Conference on Data and Application Security and Privacy [1]. Research was partially supported by Leverhulme Trust grant RPG-2018-161 and Royal Society Wolfson Research Merit Award.
Keyword:
Authorization
Resilience
Complexity theory
Organizations
Access control
resiliency
satisfiability
computational complexity
fixed-parameter tractability
期刊
IF:
7.5
论文数:
2.4K
被引数:
9.6K
机构
引用论文
An Evaluation of Point-of-Care HbA1c, HbA1c Home Kits, and Glucose Management Indicator: Potential Solutions for Telehealth Glycemic Assessments.png)
DiabetologyOAAI
DiabetologyIF0
OAAI分享收藏分享收藏
查看更多内容