Smatch Model: Extending RBAC Sessions in Virtualization Environment - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Smatch Model: Extending RBAC Sessions in Virtualization Environment

Résumé

This paper extends RBAC sessions with share ability, reusability and switch ability properties. We define the Smatch (Secure Management of switch) model in which authorized users can join, leave, reopen and reuse dynamic sessions. In Smatch, subjects can also share sessions and dynamically switch their role or function with other subjects from the same or die rent organizations. Subjects can authenticate using their function which will automatically activate the set of roles associated with this function. The Smatch model is based on first order logic with actions. It provides means to specify contextual access control and authentication policies which apply to control functional behavior of dynamic sessions. We suggest an implementation of Smatch using virtual machines.
Fichier non déposé

Dates et versions

hal-01174555 , version 1 (09-07-2015)

Identifiants

  • HAL Id : hal-01174555 , version 1

Citer

Nora Cuppens-Bouhlahia, Frédéric Cuppens, Marie Nuadi. Smatch Model: Extending RBAC Sessions in Virtualization Environment. ARES 2011 : Sixth International Conference on Availability, Reliability and Security, Aug 2011, Vienna, Austria. pp.17 - 26. ⟨hal-01174555⟩
87 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More