Refinement for Administrative Policies

Dekker, M.A.C. and Etalle, S. (2007) Refinement for Administrative Policies. In: 4th VLDB Workshop on Secure Data Management, SDM 2007, 23-24 September 2007, Vienna, Austria.

PDF
Restricted to UT campus only: Request a copy
361Kb

Abstract:	Flexibility of management is an important requisite for access control systems as it allows users to adapt the access control system in accordance with practical requirements. This paper builds on earlier work where we defined administrative policies for a general class of RBAC models. We present a formal definition of administrative refinement and we show that there is an ordering for administrative privileges which yields administrative refinements of policies. We argue (by giving an example) that this privilege ordering can be very useful in practice, and we prove that the privilege ordering is tractable.
Item Type:	Conference or Workshop Item
Copyright:	© 2007 Springer
Faculty:	Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:	Distributed and Embedded Systems (DIES)
Link to this item:	http://purl.utwente.nl/publications/61950
Official URL:	http://dx.doi.org/10.1007/978-3-540-75248-6_3
Export this item as:	BibTeX EndNote HTML Citation Reference Manager

Show download statistics for this publication

Repository Staff Only: item control page

Metis ID: 241957