A Comparison of Logical-Formula and Enumerated Authorization Policy ABAC Models - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2016

A Comparison of Logical-Formula and Enumerated Authorization Policy ABAC Models

Prosunjit Biswas
  • Fonction : Auteur
  • PersonId : 1022653
Ravi Sandhu
  • Fonction : Auteur
  • PersonId : 978076
Ram Krishnan
  • Fonction : Auteur
  • PersonId : 1010017

Résumé

Logical formulas and enumeration are the two major ways for specifying authorization policies in Attribute Based Access Control (ABAC). While considerable research has been done for specifying logical-formula authorization policy ABAC, there has been less attention to enumerated authorization policy ABAC. This paper presents a finite attribute, finite domain ABAC model for enumerated authorization policies and investigates its relationship with logical-formula authorization policy ABAC models in the finite domain. We show that these models are equivalent in their theoretical expressive power. We also show that single and multi-attribute ABAC models are equally expressive.
Fichier principal
Vignette du fichier
428203_1_En_9_Chapter.pdf (358.15 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01633664 , version 1 (13-11-2017)

Licence

Identifiants

Citer

Prosunjit Biswas, Ravi Sandhu, Ram Krishnan. A Comparison of Logical-Formula and Enumerated Authorization Policy ABAC Models. 30th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2016, Trento, Italy. pp.122-129, ⟨10.1007/978-3-319-41483-6_9⟩. ⟨hal-01633664⟩
54 Consultations
136 Téléchargements

Altmetric

Partager

More