High Level Conflict Management Strategies in Advanced Access Control Models

Abstract

Specifying a security policy that includes both permissions and prohibitions, may lead to conflicts. This corresponds to a situation where a subject is both permitted and prohibited to perform a given action on a given object. We adopt a comparative approach to investigate this problem. We first investigate access control models based on rules, called Rule-BAC, and present weaknesses that arise when we try to manage conflicts in this model. In particular, Rule-BAC models fail to provide decidable solution to redundant rules and potential conflicts problems. Then, we show how a more structured model, say OR-BAC (Organization Based Access Control), gifted with inheritance mechanism make redundant rules and potential conflict problems tractable in polynomial time.

Secure interoperability with O2O contracts

“…In the OrBAC model, concrete security policy rules are derived automatically Derivation in the OrBAC model is computable in polynomial time. 19 …”

“…To ease the policy designer's work, we anticipate the resolution of conflicts generated by such exception rules. For this purpose and as suggested in, 19 conflicts are solved by assigning priorities to security rules. Thus, exception rules are always associated with higher priority than other security rules (including the non derivable rules).…”

“…Thus, exception rules are always associated with higher priority than other security rules (including the non derivable rules). This conflict resolution strategy is chosen to manage the shadowing anomaly b and 19 shows that this strategy is computable in polynomial time.…”

A PEP-PDP Architecture to Monitor and Enforce Security Policies in Java Applications

“…Currently, only access control and obligations are supported. However, it is straightforward to add support for more advanced features such as delegation [20] and more advanced conflict detection and resolution strategies [21].…”

Testing Security Rules with Decomposable Activities

“…We assume that this issue has been checked. There are several techniques to achieve this goal (see for instance [7]). …”