Formal Verification of Authorization Policies for Enterprise Social Networks using PlusCal-2 - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2017

Formal Verification of Authorization Policies for Enterprise Social Networks using PlusCal-2

Abstract

Information security research has been a highly active and widely studied research direction. In the domain of of Enterprise Social Networks (ESNs), the security challenges are amplified as they aim to incorporate the social technologies in an enterprise setup and thus asserting greater control on information security. Further, the security challenges may not be limited to the boundaries of a single enterprise and need to be catered for a federated environment where users from different ESNs can collaborate. In this paper, we address the problem of federated authorization for the ESNs and present an approach for combining user level policies with the enterprise policies. We present the formal verification technique for ESNs and how it can be used to identify the conflicts in the policies. It allows us to bridge the gap between user-centric or enterprise-centric approaches as required by the domain of ESN. We apply our specification of ESNs on a scenario and discuss the model checking results.
Fichier principal
Vignette du fichier
CollaborateCom2017.pdf (305.02 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01657116 , version 1 (17-01-2018)

Identifiers

  • HAL Id : hal-01657116 , version 1

Cite

Sabina Aktar, Ehtesham Zahoor, Olivier Perrin. Formal Verification of Authorization Policies for Enterprise Social Networks using PlusCal-2. CollaborateCom 2017 - 13th EAI International Conference on Collaborative Computing: Networking, Applications and Worksharing, Dec 2017, Edimburg, United Kingdom. pp.1-10. ⟨hal-01657116⟩
238 View
253 Download

Share

Gmail Facebook X LinkedIn More