Title :
How much is "enough"? Risk in trust-based access control
Author_Institution :
Comput. Lab., Cambridge Univ., UK
Abstract :
Trust-based access control is the idea of using a model of human notions of trust and community as the basis for assigning privileges. Risk analysis is used to determine how much trust is required to assign a particular privilege in trust-based access control. Other topics mentioned are the validation of the model, investigation of how continuous probability density functions may be reasoned about in resource constrained environments and the creation of a general purpose policy language to allow the specification of policies.
Keywords :
authorisation; formal specification; probability; public key cryptography; risk analysis; SPKI certificates; authorisation; cost-PDF; probability density function; public key infrastructure; resource constrained environment; risk analysis; trust-based access control; Access control; Collaborative work; Conferences; International collaboration;
Conference_Titel :
Enabling Technologies: Infrastructure for Collaborative Enterprises, 2003. WET ICE 2003. Proceedings. Twelfth IEEE International Workshops on
Print_ISBN :
0-7695-1963-6
DOI :
10.1109/ENABL.2003.1231421