The RSL99 language for role-based separation of duty constraints
RBAC '99 Proceedings of the fourth ACM workshop on Role-based access control
Conflicts in Policy-Based Distributed Systems Management
IEEE Transactions on Software Engineering
A Flexible Method for Information System Security Policy Specification
ESORICS '98 Proceedings of the 5th European Symposium on Research in Computer Security
Analyzing consistency of security policies
SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
Finite State Transducers for Policy Evaluation and Conflict Resolution
POLICY '04 Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks
Mobile software agents: an overview
IEEE Communications Magazine
Security and management policy specification
IEEE Network: The Magazine of Global Internetworking
Policy-based management of content distribution networks
IEEE Network: The Magazine of Global Internetworking
HeteroSim: heterogeneous simulation framework
SpringSim '09 Proceedings of the 2009 Spring Simulation Multiconference
Collaborations, mergers, acquisitions, and security policy conflict analysis
Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research
| Hi-index | 0.00 |
This paper presents a policy-conflict handling model, which is independent of both technical details of policy enforcement architecture and syntax of policy-specification language. The model primarily focuses on handling the application-specific (semantic) conflicts [1]. This model has been applied to the POLICE Policy-Based Network Management (PBNM) framework in [2-4]. The POLICE framework does not suffer from the modality conflicts [1] since it does not support negative policies whereas application-specific (semantic) conflicts are handled according to the model described in this paper. We are able to rely on a common schema in our model since almost all policy specification languages include subject, target and action concepts and the fact that all languages can be modeled in an approximately similar way allows our model to be designed independently of other details of the language.