Specification and Enforcement of Dynamic Authorization Policies oriented by Situations - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Specification and Enforcement of Dynamic Authorization Policies oriented by Situations

Résumé

Nowadays, accessing communication networks and systems faces multitude applications with large-scale requirements dimensions. Mobility -roaming services in particular- during urgent situations exacerbate the access control issues. Dynamic authorization then is required. However, traditional access control fails to ensure policies to be dynamic. Instead, we propose to externalize the dynamic behavior management of networks and systems through situations. Situations modularize the policy into groups of rules and orient decisions. Our solution limits policy updates and hence authorization inconsistencies. The authorization system is built upon the XACML architecture coupled with a complex event- processing engine to handle the concept of situations. Situation- oriented attribute based policies are defined statically allowing static verification and validation.
Fichier principal
Vignette du fichier
Specification and Enforcement of Dynamic Authorization Policies Oriented by Situations.pdf (719.04 Ko) Télécharger le fichier
Origine Fichiers éditeurs autorisés sur une archive ouverte

Dates et versions

hal-03230724 , version 1 (21-05-2021)

Identifiants

Citer

Bashar Kabbani, Romain Laborde, François Barrère, Abdelmalek Benzekri. Specification and Enforcement of Dynamic Authorization Policies oriented by Situations. 6th IFIP International Conference on New Technologies, Mobility and Security (NTMS 2014), IFIP: International Federation for Information Processing, Mar 2014, Dubaï, United Arab Emirates. pp.1--6, ⟨10.1109/NTMS.2014.6814050⟩. ⟨hal-03230724⟩
34 Consultations
73 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More