ACPT: A Tool for Modeling and Verifying Access Control Policies

Author

Hwang, JeeHyun ; Xie, Tao ; Hu, Vincent ; Altunay, Mine

Author_Institution

Dept. of Comput. Sci., North Carolina State Univ., Raleigh, NC, USA

fYear

2010

fDate

21-23 July 2010

Firstpage

40

Lastpage

43

Abstract

Access control mechanisms are a widely adopted technology for information security. Since access decisions (i.e., permit or deny) on requests are dependent on access control policies, ensuring the correct modeling and implementation of access control policies is crucial for adopting access control mechanisms. To address this issue, we develop a tool, called ACPT (Access Control Policy Testing), that helps to model and implement policies correctly during policy modeling, implementation, and verification.

Keywords

authorisation; formal specification; formal verification; Access Control Policy Testing; access control policy modeling; access control policy verification; access decision; information security; policy implementation; Access control; Computational modeling; Graphical user interfaces; Heuristic algorithms; NIST; Testing; Access Control Policies; Policy Modeling; Policy Testing; Policy Verification;

fLanguage

English

Publisher

ieee

Conference_Titel

Policies for Distributed Systems and Networks (POLICY), 2010 IEEE International Symposium on

Conference_Location

Fairfax, VA

Print_ISBN

978-1-4244-8206-1

Electronic_ISBN

978-0-7695-4238-6

Type

conf

DOI

10.1109/POLICY.2010.22

Filename

5629938