Policy expression and checking in XACML, WS-Policies, and the jABC

Martin Karusseit, Tiziana Margaria, Holger Willebrandt

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Web-based access to sensitive and confidential data is realized today via different approaches, using a variety of methods to specify and combine access control policies. In an optic of change management and evolution, a structured and flexible model is needed to handle dynamicity, particularly when handling rights in systems with many users which hold different roles. Furthermore the validation of security constraints is an important key to warrant the reliability of control mechanisms. This paper compares the temporal logic-based approach for modeling access control used by the jABC framework with two popular XML-based description languages (XACML and WS-Policy), which are quasi-standards for policy expression in Web applications. Its usage is illustrated here on the example of the web-based Online Conference Service (OCS). The respective functionalities are described and examined in consideration of their ability to validate and enforce the needed policies.

Original languageEnglish
Title of host publicationTAV-WEB 2008 - Proceedings of the Workshop on Testing, Analysis and Verification of Web Software
Pages20-26
Number of pages7
DOIs
Publication statusPublished - 2008
Externally publishedYes
EventWorkshop on Testing, Analysis and Verification of Web Software, TAV-WEB 2008 - Seattle, WA, United States
Duration: 21 Jul 200821 Jul 2008

Publication series

NameTAV-WEB 2008 - Proceedings of the Workshop on Testing, Analysis and Verification of Web Software

Conference

ConferenceWorkshop on Testing, Analysis and Verification of Web Software, TAV-WEB 2008
Country/TerritoryUnited States
CitySeattle, WA
Period21/07/0821/07/08

Keywords

  • Access control
  • Model checking
  • Policies
  • Validation

Fingerprint

Dive into the research topics of 'Policy expression and checking in XACML, WS-Policies, and the jABC'. Together they form a unique fingerprint.

Cite this