Representing and Reasoning about Web Access Control Policies

The advent of emerging technologies such as Web services, service-oriented architecture, and cloud computing has enabled us to perform business services more efficiently and effectively. However, we still suffer from unintended security leakages by unauthorized services while providing more convenient services to Internet users through such a cutting-edge technological growth. Furthermore, designing and managing Web access control policies are often error-prone due to the lack of logical and formal foundation. In this paper, we attempt to introduce a logic-based policy management approach for Web access control policies especially focusing on XACML (eXtensible Access Control Markup Language) policies, which have become the de facto standard for specifying and enforcing access control policies for various applications and services in current Web-based computing technologies. Our approach adopts Answer Set Programming (ASP) to formulate XACML that allows us to leverage the features of AS...

• Type: Journal
• Year: 2010
• Where: COMPSAC
• Authors: Gail-Joon Ahn, Hongxin Hu, Joohyung Lee, Yunsong Meng
• Keywords: Access Control, Access Control Policies, COMPSAC 2010, Software Engineering, Web Access Control