Category-Based authorisation models: operational semantics and expressive power

  • Authors:
  • Clara Bertolissi;Maribel Fernández

  • Affiliations:
  • LIF, Université de Provence, Marseille, France;Dept. of Computer Science, King's College London, London, U.K.

  • Venue:
  • ESSoS'10 Proceedings of the Second international conference on Engineering Secure Software and Systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we give an operational specification of a meta-model of access control using term rewriting. To demonstrate the expressiveness of the meta-model, we show how several traditional access control models, and also some novel models, can be defined as special cases. The operational specification that we give permits declarative representation of access control requirements, is suitable for fast prototyping of access control checking, and facilitates the process of proving properties of access control policies.