Tracking and constraining authorization provenance

Authors:
Jinwei Hu;Khaled M. Khan;Yun Bai;Yan Zhang
Affiliations:
Department of Computer Science and Engineering, Qatar University, Qatar;Department of Computer Science and Engineering, Qatar University, Qatar;School of Computing and Mathematics, University of Western Sydney, Australia;School of Computing and Mathematics, University of Western Sydney, Australia
Venue:
IEA/AIE'12 Proceedings of the 25th international conference on Industrial Engineering and Other Applications of Applied Intelligent Systems: advanced research in applied artificial intelligence
Year:
2012

Citing 10
Cited 0

Proof-carrying authentication

CCS '99 Proceedings of the 6th ACM conference on Computer and communications security
Enforceable security policies

ACM Transactions on Information and System Security (TISSEC)
Provenance-aware storage systems

ATEC '06 Proceedings of the annual conference on USENIX '06 Annual Technical Conference
On the Security of Delegation in Access Control Systems

ESORICS '08 Proceedings of the 13th European Symposium on Research in Computer Security: Computer Security
Securing provenance

HOTSEC'08 Proceedings of the 3rd conference on Hot topics in security
The case of the fake Picasso: preventing history forgery with secure provenance

FAST '09 Proccedings of the 7th conference on File and storage technologies
Trojan horse resistant discretionary access control

Proceedings of the 14th ACM symposium on Access control models and technologies
Deriving epistemic conclusions from agent architecture

Proceedings of the 12th Conference on Theoretical Aspects of Rationality and Knowledge
An Access Control Language for a General Provenance Model

SDM '09 Proceedings of the 6th VLDB Workshop on Secure Data Management
A logic for authorization provenance

ASIACCS '10 Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Authorization provenance concerns how an authorization is derived. It appears important to define authorization provenance to (1) analyze policy bases, (2) defend against a class of attacks, and (3) audit authorizations. In this paper, we study a notion of authorization provenance, based on a recently proposed logic in the literature. By examining a collection of properties, we show this definition captures the intuitions of authorization provenance. We also present an application of our notion of authorization provenance: specifying and enforcing a new type of security requirements.