Work

HyPE: A Hybrid Approach toward Policy Engineering in Attribute-Based Access Control

Year: 2018

Type: article

Abstract: Successful deployment of attribute-based access control requires the process of policy engineering which involves constructing a set of appropriate rules, known as a policy. Policy engineering is performed either by a top-down approach that may ignore some of the existing accesses in the organization or a bottom-up approach that may form rules which are not relevant to the organizational processes. In this work, we propose a hybrid approach toward policy engineering that addresses the limitations of the top-down and the bottom-up approaches while preserving their individual advantages.

Source: Letters of the IEEE Computer Society

DOI: 10.1109/locs.2018.2889980

Authors: Saptarshi Das, Shamik Sural, Jaideep Vaidya, Vijayalakshmi Atluri

Institutions: Indian Institute of Technology Kharagpur, Rutgers, The State University of New Jersey

Language: English

Topic: Access Control and Trust

Subfield: Sociology and Political Science

Field: Social Sciences

Domain: Social Sciences

Open Access status: green

Funders: National Science Foundation, National Institutes of Health, National Science Foundation of Sri Lanka, National Institute of General Medical Sciences

Awards: Secure and PrivAte Collaborative EnvironmentS (SPACES) for biomedical analytics, G31069200, G6059143425, G6613121587