How to Leverage Access Control Specification for Autonomic Policy Management

To bridge the gap between decoupled environments, such as, generic policy managers running on a variety of managed resources, we have proposed a new framework for access control inference directly from the managed resources, and provide advisory feedback based on finegrained analysis and validation. We provided a canonical representation and data structure for representing arbitrarily fine-grained access control information. We also provided efficient solution for validating policies against the inferred access control information, which can easily be implemented as a reference monitor in any generic policy management system. More importantly we have provided an advisory feedback module that advises both the policy manager and managed resource administrator on potential access control violations