Evaluating the comprehensive complexity of authorization-based access control policies using quantitative metrics - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

Evaluating the comprehensive complexity of authorization-based access control policies using quantitative metrics

Résumé

Access control models allow flexible authoring and management of security policies, using high-level statements. They enable the expression of structured and expressive policies. However, they have an impact on the policy characteristics. The complexity of such policies is one of the affected characteristics. We propose a series of quantitative metrics to assess comprehensive complexity of policies. By comprehensive, we mean the difficulty of understanding a policy by administrators. We formalize the concepts of authorization-based access control models, to propose general metrics regardless of the model. We also show the application of the proposed metrics through a content management system (CMS) policy example. We outline a proof-of-concept to evaluate the feasibility of our proposal, based on SELinux policies for a general-purpose CMS
Fichier principal
Vignette du fichier
preprint-secrypt-2015.pdf (156.54 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01332331 , version 1 (15-06-2016)

Identifiants

Citer

Malek Belhaouane, Joaquin Garcia-Alfaro, Hervé Debar. Evaluating the comprehensive complexity of authorization-based access control policies using quantitative metrics. SECRYPT 2015 : 12th International Conference on Security and Cryptography, Jul 2015, Colmar, France. pp.53 - 64, ⟨10.5220/0005544100530064⟩. ⟨hal-01332331⟩
79 Consultations
230 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More