Towards reasonability properties for access-control policy languages

No abstract is available for this paper.

• Publication year

  2006

• Venue

  ACM Symposium on Access Control Models and Technologies

• Publication date

  2006-06-07

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/1133058.1133081
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Verification and change-impact analysis of access-control policies

  2005cited by this paper
• Policies, Models, and Languages for Access Control

  2005cited by this paper
• The Soundness and Completeness of Margrave with Respect to a Subset of XACML

  2005cited by this paper
• A Case Study in Access Control Requirements for a Health Information System

  2004cited by this paper
• Cassandra: flexible trust management, applied to electronic health records

  2004cited by this paper
• Using first-order logic to reason about policies

  2003cited by this paper
• A unified framework for enforcing multiple access control policies

  1997cited by this paper
• Role-Based Access Control Models

  1996cited by this paper
• Authorizations in relational database management systems

  1993cited by this paper
• On Abstraction and the Expressive Power of Programming Languages

  1991cited by this paper
• On the Expressive Power of Programming Languages

  1990cited by this paper
• Brevity and clarity in command languages

  1981cited by this paper

• Automata-Based Study of Dynamic Access Control Policies

  2023cites this paper
• A certified access control policy language: TEpla

  2023influential citation
• Formal Verification of a Certified Policy Language

  2020influential citation
• Handling Incomplete Information in Policy Evaluation using Attribute Similarity

  2020cites this paper
• Verification and Evaluation of Computer and Communication Systems: 14th International Conference, VECoS 2020, Xi'an, China, October 26–27, 2020, Proceedings

  2020cites this paper
• TEpla: A Certified Type Enforcement Access-Control Policy Language

  2019cites this paper
• On Attribute Retrieval in ABAC

  2019cites this paper
• A framework for the extended evaluation of ABAC policies

  2019cites this paper
• Efficient Extended ABAC Evaluation

  2018cites this paper
• Analyzing XACML policies using answer set programming

  2018cites this paper
• Capturing mobile security policies precisely

  2018cites this paper
• A Certified Core Policy Language

  2017cites this paper
• Review of Existing Analysis Tools for SELinux Security Policies: Challenges and a Proposed Solution

  2017cites this paper
• Towards an effective method for probabilistic access control

  2016cites this paper
• A Formal Approach to Specification, Analysis and Implementation of Policy-Based Systems

  2016cites this paper
• A Rigorous Framework for Specification, Analysis and Enforcement of Access Control Policies

  2016influential citation
• SBA-XACML: Set-based approach providing efficient policy decision process for accessing Web services

  2015cites this paper
• Policy and Security Conguration Management in Distributed Systems

  2015cites this paper
• Semantics-based approach for detecting flaws, conflicts and redundancies in XACML policies

  2015cites this paper
• Access control with non-deterministic and probabilistic attribute retrieval

  2015cites this paper
• Modelling and Analysing Access Control Policies in XACML 3.0

  2015cites this paper
• Preventing information leaks with policy-agnostic programming

  2015cites this paper
• On Missing Attributes in Access Control: Non-deterministic and Probabilistic Attribute Retrieval

  2015influential citation
• Specification and Analysis of Attribute-Based Access Control Policies: An Overview

  2014cites this paper
• Bootstrapping Privacy Compliance in Big Data Systems

  2014cites this paper
• Towards efficient evaluation of XACML policies

  2014cites this paper
• Monotonicity and Completeness in Attribute-Based Access Control

  2014cites this paper
• Reduction of access control decisions

  2014cites this paper
• A Case Study of Intelligent IDS False Alarm Reduction in Cloud Environments: Challenges and Trends

  2014cites this paper
• Privacy enforcement with data owner-defined policies

  2013cites this paper
• Policy-Based Access Control from Numerical Evidence 1

  2013cites this paper
• Automated Certification of Authorisation Policy Resistance

  2013cites this paper
• Privacy Enforcement with Data Owner-defined Policies

  2013cites this paper
• A FORMAL SEMANTIC MODEL FOR THE ACCESS SPECIFICATION LANGUAGE RASP

  2012cites this paper
• Towards A Generic Formal Framework for Access Control Systems

  2012influential citation
• A transitive access control model for dynamic roles and attributes

  2012cites this paper
• Formalisation and Implementation of the XACML Access Control Mechanism

  2012cites this paper
• RATIONALE AND DESIGN OF THE ACCESS SPECIFICATION LANGUAGE RASP

  2012cites this paper
• Specification of role and attribute transitions for secure information system access

  2012cites this paper
• Assurance Management Framework for Access Control Systems

  2012cites this paper
• A framework for modelling and testing of security policies

  2012cites this paper
• A Policy-Based Security Framework for Privacy-Enhancing Data Access and Usage Control in Grids

  2011cites this paper
• Designing Fast and Scalable XACML Policy Evaluation Engines

  2011cites this paper
• XACML Policy Evaluation Engine Based on Multi-Level Optimization Technology

  2011cites this paper
• Formal Specification and Verification of Modular Security Policy Based on Colored Petri Nets

  2011cites this paper
• Fine-grained integration of access control policies

  2011cites this paper
• Reasoning about XACML Policy Descriptions in Answer Set Programming ( Preliminary Report )

  2010cites this paper
• On the composition of access control management in multidomain environment

  2010cites this paper
• Representing and Reasoning about Web Access Control Policies

  2010cites this paper
• Component-Based Security Policy Design with Colored Petri Nets

  2009cites this paper
• Generation of policy-rich websites from declarative models

  2009cites this paper
• Improving web site security with data flow management

  2009cites this paper
• Modular Security Policy Design based on Extended Petri Nets

  2009cites this paper
• Formalism of the access control model based on the marked Petri Nets

  2009cites this paper
• Designing Fast and Scalable Policy Evaluation Engines

  2009cites this paper
• Policy Composition Based on Petri Nets

  2009cites this paper
• Improving application security with data flow assertions

  2009cites this paper
• Rewriting and modularity for security policies

  2008cites this paper
• Quality of Service in SOA Environments. An Overview and Research Agenda (Quality of Service in SOA-Umgebungen)

  2008cites this paper
• Formalism of the Access Control Model Based on the Marqued Petri Nets

  2008cites this paper
• Xengine: a fast and scalable XACML policy evaluation engine

  2008cites this paper
• The user is not the enemy: fighting malware by tracking user intentions

  2008cites this paper
• Declarative Access Control for WebDSL: Combining Language Integration and Separation of Concerns

  2008cites this paper
• Réécriture et Modularité pour les Politiques de Sécurité. (Term Rewriting and Modularity for Security Policies)

  2008cites this paper
• Declarative Access Control for WebDSL

  2008cites this paper
• A Formal Comparison of the Bell & LaPadula and RBAC Models

  2008cites this paper
• Contrôler le contrôle d'accès : Approches formelles

  2007cites this paper
• Conditional Privacy-Aware Role Based Access Control

  2007cites this paper
• Logic-Based Access Control Policy Specification and Management

  2007influential citation
• Fine-grained access control for GridFTP using SecPAL

  2007cites this paper
• Sémantique des systèmes de contrôle d'accès:Définition d'un cadre sémantique pour la spécification, l'implantation et la comparaison de modèles de contrôle d'accès

  2007cites this paper