智能与分布计算实验室

Inconsistency Resolving of Safety and Utility in Access Control

出版社:
  • 出版社:Hindawi Publishing Corporation
  • 页数::101
  • 出版年:2011
摘要内容:

Policy inconsistencies may arise between safety and utility policies due to their opposite objectives. In this work weprovide a formal examination of policy inconsistencies resolution for the coexistence of static separation-of-duty(SSoD) policies and strict availability (SA) policies. Firstly, we reduce the complexity of reasoning about policyinconsistencies by static pruning technique and minimal inconsistency cover set. Secondly, we present a systematicmethodology for measuring safety loss and utility loss, and evaluate the safety-utility tradeoff for each choice.Thirdly, we present two prioritized-based resolutions to deal with policy inconsistencies based on safety-utilitytradeoff. Finally, experiments show the effectiveness and efficiency of our approach.

关键词:
  • access control;safety;utility; separation-of-duty