Dynamic event-based access control as term rewriting

  • Authors:
  • Clara Bertolissi;Maribel Fernández;Steve Barker

  • Affiliations:
  • LIF, Université de Provence, Marseille, France;King's College London, Dept. of Computer Science, London, U.K.;King's College London, Dept. of Computer Science, London, U.K.

  • Venue:
  • Proceedings of the 21st annual IFIP WG 11.3 working conference on Data and applications security
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Despite the widespread adoption of Role-based Access Control (RBAC) models, new access control models are required for new applications for which RBAC may not be especially well suited and for which implementations of RBAC do not enable properties of access control policies to be adequately defined and proven. To address these issues, we propose a form of access control model that is based upon the key notion of an event. The access control model that we propose is intended to permit the representation of access control requirements in a distributed and changing computing environment, the proving of properties of access control policies defined in terms of our model, and direct implementations for access control checking.