A Holistic Approach to Security Policies -- Policy Distribution with XACML over COPS

Authors:
Jan Peters;Roland Rieke;Taufiq Rochaeli;Björn Steinemann;Ruben Wolf
Affiliations:
Fraunhofer Institute for Computer Graphics Research IGD, Germany;Fraunhofer Institute for Secure Information Technology SIT, Germany;Technical University of Darmstadt, Department of Computer Science, IT-Security group, Germany;Fraunhofer Institute for Secure Information Technology SIT, Germany;Fraunhofer Institute for Secure Information Technology SIT, Germany
Venue:
Electronic Notes in Theoretical Computer Science (ENTCS)
Year:
2007

Citing 8
Cited 0

Role activation hierarchies

RBAC '98 Proceedings of the third ACM workshop on Role-based access control
The SH-Verification Tool

Proceedings of the Thirteenth International Florida Artificial Intelligence Research Society Conference
Role-Based Access Control

Role-Based Access Control
A Policy Based QoS Management System for the IntServ/DiffServ Based Internet

POLICY '02 Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02)
Policy-based quality of service management in wireless ad hoc networks

Policy-based quality of service management in wireless ad hoc networks
RSVP Policy Control using XACML

POLICY '04 Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks
Verification and change-impact analysis of access-control policies

Proceedings of the 27th international conference on Software engineering
Reasoning about XACML policies using CSP

Proceedings of the 2005 workshop on Secure web services

Quantified Score

Hi-index	0.00

Visualization

Abstract

The potentials of modern information technology can only be exploited, if the underlying infrastructure and the applied applications sufficiently take into account all aspects of IT security. This paper presents the platform architecture of the SicAri project, which aims to build a security platform for ubiquitous Internet usage, and gives an overview of the implicitly and explicitly used security mechanisms to enable access control for service oriented applications in distributed environments. The paper will introduce the security policy integration concept with a special focus on distribution of security policies within the service infrastructure for transparent policy enforcement. We describe in details our extensions of the COPS protocol to transport XACML payload for security policy distribution and policy decision requests/responses.