DMCA
Policy contexts: Controlling information flow in parameterised RBAC (2003)
Cached
Download Links
- [www.cl.cam.ac.uk]
- [www.cl.cam.ac.uk]
- [www.cl.cam.ac.uk]
- DBLP
Other Repositories/Bibliography
| Venue: | In Policy 2003: IEEE 4th International Workshop on Policies for Distributed Systems and Networks |
| Citations: | 14 - 2 self |
BibTeX
@INPROCEEDINGS{Belokosztolszki03policycontexts:,
author = {András Belokosztolszki and David M. Eyers and Ken Moody},
title = {Policy contexts: Controlling information flow in parameterised RBAC},
booktitle = {In Policy 2003: IEEE 4th International Workshop on Policies for Distributed Systems and Networks},
year = {2003},
pages = {4--6},
publisher = {IEEE Computer Society Press}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Many RBAC models have augmented the fundamental requirement of a role abstraction with features such as parameterised roles and environment-aware policy. This paper examines the potential for unintentional leakage of information during RBAC policy enforcement, either through the exchange of parameters with external services when checking environmental conditions, or through a policy design which does not appropriately separate policy subsections with different basic purposes. We propose a simple, robust mechanism for handling these problems, and illustrate our approach with a current application of our OASIS RBAC system. 1
Keyphrases
controlling information flow parameterised rbac policy context fundamental requirement robust mechanism unintentional leakage many rbac model environmental condition role abstraction environment-aware policy current application different basic purpose oasis rbac system rbac policy enforcement separate policy subsection parameterised role external service policy design
