
Formal foundations for access control policies with both authority delegation and policy composition operators are partial and limited. Correctness guarantees cannot therefore be formally stated and verified for decentralized composite access control systems, such as those based on XACML 3. To address this problem we develop a formal policy language BelLog that can express both delegation and composition operators. We illustrate, through examples, how BelLog can be used to specify practical policies. Moreover, we present an analysis framework for reasoning about BelLog policies and we give decidability and complexity results for policy entailment and policy containment in BelLog.
Data processing, computer science, NETWORK MONITORING (COMPUTER SYSTEMS), NETZWERKÜBERWACHUNG + NETZWERKADMINISTRATION (COMPUTERSYSTEME), ZUGRIFFSKONTROLLE (BETRIEBSSYSTEME), ACCESS CONTROL (OPERATING SYSTEMS); NETZWERKÜBERWACHUNG + NETZWERKADMINISTRATION (COMPUTERSYSTEME); NETWORK MONITORING (COMPUTER SYSTEMS); ZUGRIFFSKONTROLLE (BETRIEBSSYSTEME), ACCESS CONTROL (OPERATING SYSTEMS), info:eu-repo/classification/ddc/004
Data processing, computer science, NETWORK MONITORING (COMPUTER SYSTEMS), NETZWERKÜBERWACHUNG + NETZWERKADMINISTRATION (COMPUTERSYSTEME), ZUGRIFFSKONTROLLE (BETRIEBSSYSTEME), ACCESS CONTROL (OPERATING SYSTEMS); NETZWERKÜBERWACHUNG + NETZWERKADMINISTRATION (COMPUTERSYSTEME); NETWORK MONITORING (COMPUTER SYSTEMS); ZUGRIFFSKONTROLLE (BETRIEBSSYSTEME), ACCESS CONTROL (OPERATING SYSTEMS), info:eu-repo/classification/ddc/004
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 15 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Top 10% | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Top 10% |
