Term Rewriting for Access Control

We demonstrate how access control models and policies can be represented by using term rewriting systems, and how rewriting may be used for evaluating access requests and for proving properties of an access control policy. We focus on two kinds of access control models: discretionary models, based on access control lists (ACLs), and rolebased access control (RBAC) models. For RBAC models, we show that we can specify several variants, including models with role hierarchies, and constraints and support for security administrator review querying.

• Type: Conference
• Year: 2006
• Where: DBSEC
• Authors: Steve Barker, Maribel Fernández
• Keywords: Access Control, Access Control Models, Access Control Policy, DBSEC 2006, DBSEC 2007