A model for checking consistency in access control policies for network management - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2007

A model for checking consistency in access control policies for network management

Abstract

This paper addresses the consistency of initially heterogeneous access control policies in the network management area. It addresses the well-know network management frameworks like SNMP (v3), CLI, Netconf and the lesser known TR-069 proposed in the framework of ADSL operators. For each of these, a formal definition of the access control model is proposed as well as the conversion towards a unified Role-Based Access Control model. Next, we show how to compare roles and permissions between the generated access control policies and to answer to questions like: which policy is more permissive, what are the common privileges between a set of roles ?
Not file

Dates and versions

inria-00172054 , version 1 (13-09-2007)

Identifiers

  • HAL Id : inria-00172054 , version 1

Cite

Radu State, Vincent Cridlig, Olivier Festor. A model for checking consistency in access control policies for network management. 10th IFIP/IEEE International Symposium on Integrated Management (IM 2007), May 2007, Munich, Germany. ⟨inria-00172054⟩
65 View
0 Download

Share

Gmail Facebook Twitter LinkedIn More