Policies for Distributed Systems and Networks, IEEE International Workshop on (2009)
July 20, 2009 to July 22, 2009
Attribute-based access control (ABAC) policies are effective and flexible in governing the access to information and resources in open distributed computing environments. However, ABAC policy rules are often complex making them prone to conflicts. This paper proposes an optimized method to detect the conflicts between statistically conflicting rules in an ABAC policy. This method includes two optimization techniques: rule reduction and binary-search. The first technique reduces the rules into a set of compact, semantically equivalent rules through removing redundant information among the rules. The binary-search technique is then applied to discover the conflicts among them.
Access Contrl, Attribute-Based Access Control, Conflict Analysis, Rule Reduction
E. Y. Yang, A. E. Arenas and C. Shu, "Detecting Conflicts in ABAC Policies with Rule-Reduction and Binary-Search Techniques," Policies for Distributed Systems and Networks, IEEE International Workshop on(POLICY), London, UK, 2009, pp. 182-185.