Anomaly discovery and resolution in web access control policies

Abstract

The advent of emerging technologies such as Web services, serviceoriented architecture, and cloud computing has enabled us to perform business services more efficiently and effectively. However, we still suffer from unintended security leakages by unauthorized actions in business services while providing more convenient services to Internet users through such a cutting-edge technological growth. Furthermore, designing and managing Web access control policies are often error-prone due to the lack of effective analysis mechanisms and tools. In this paper, we represent an innovative policy anomaly analysis approach for Web access control policies. We focus on XACML (eXtensible Access Control Markup Language) policy since XACML has become the de facto standard for specifying and enforcing access control policies for various Webbased applications and services. We introduce a policy-based segmentation technique to accurately identify policy anomalies and derive effective anomaly resolutions. We also discuss a proof-ofconcept implementation of our method called XAnalyzer and demonstrate how efficiently our approach can discover and resolve policy anomalies.

Model-Driven Integration and Analysis of Access-control Policies in Multi-layer Information Systems

“…In order to validate the feasibility of our approach, a proof-of-concept prototype implementation has been developed under the Eclipse environment 6 by using Model-driven tools and techniques. Concretely, our implementation is based on two features:…”

“…The following model-to-model transformation have been created: 1) A model transformation for each component model to a XACML model. 2) A library of helpers, an ATL mechanism to factorize OCL operations, representing the basic operations in section 6 3) A model transformation for the integration algorithm in 1. 4) A model query for the detection of anomalies, following the algorithm 2.…”

“…More similar to us and working on XACML policies, in [6] the authors describe approaches to detect anomalies while in [14] integration analysis for policies belonging to different authorization entities is proposed. However, they do not deal with dependencies between policies.…”

Detecting And Resolving Privacy Conflicts in Online Social Networks using AC2P Protocol

“…In future work, we are planning to determine the comprehensive privacy conflict resolution approach [21], [22]and to probe the services of collaborative management of shared data in OSN's.We would study inference-based techniques [20] for automatically configure privacy preferences in the AC2P Protocol. Besides, we plan to systematically integrate the notion of trust and reputation into Decision making model and investigate a comprehensive solution to cope with collusion attacks for providing a robust Decision making service in OSNs.…”

Auto Finding and Resolving Distributed Firewall Policy

“…In [8] an innovative policy anomaly analysis approach for web control policy is proposed, here policy based segmentation technique is used into order to accurately identify policy anomalies.…”