Theoretical Foundation for Model Checking Role Containment in RT

dc.contributor.authorReith, Mark
dc.contributor.authorNiu, Jianwei
dc.contributor.authorWinsborough, William H.
dc.date.accessioned2023-10-24T16:24:11Z
dc.date.available2023-10-24T16:24:11Z
dc.date.issued2008-12
dc.description.abstractTrust management is a scalable and flexible form of access control that relies heavily on delegation techniques. While these techniques may be necessary in large or decentralized systems, stakeholders need an analysis methodology and automated tools for reasoning about who will have access to their resources today as well as in the future. When an access control policy fails to satisfy the policy author’s security objectives, tools should provide information that demonstrate how and why the failure occurred. Such information is useful in that it may assist policy authors in constructing policies that satisfy security objectives, which support policy authoring and maintenance. This paper presents a collection of reduction, optimization, and verification techniques useful in determining whether security properties are satisfied by RT policies. We provide proofs of correctness as well as demonstrate the degree of effectiveness and efficiency the techniques provide through empirical evaluation. While the type of analysis problem we examine is generally intractable, we demonstrate that our reduction and optimization techniques may be able to reduce problem instances into a form that can be automatically verified.
dc.description.departmentComputer Science
dc.description.sponsorshipWilliam H. Winsborough is supported in part by NSF awards CCR-0325951, CCF-0524010, and CNS-0716750, and Texas Advanced Research Program award ARP 010115-0037-2007. Jianwei Niu is supported in part by Texas Advanced Research Program award ARP 010115-0037-2007, and University of Texas at San Antonio research award TRAC-2008.
dc.identifier.urihttps://hdl.handle.net/20.500.12588/2150
dc.language.isoen_US
dc.publisherUTSA Department of Computer Science
dc.relation.ispartofseriesTechnical Report; CS-TR-2008-017
dc.titleTheoretical Foundation for Model Checking Role Containment in RT
dc.typeTechnical Report

Files

Original bundle

Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
Reith_et_al_CS-TR-2008-017.pdf
Size:
296.67 KB
Format:
Adobe Portable Document Format

License bundle

Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.86 KB
Format:
Item-specific license agreed upon to submission
Description: