Abstract:Access control is one of the most fundamental and widely used security mechanisms. Access control mechanisms control which principals such as users or processes have access to which resources in a system. To facilitate managing and maintaining access control, access control policies are increasingly written in specification languages such as XACML. The specification of access control policies itself is often a challenging problem. Furthermore, XACML is intentionally designed to be generic: it provides the freedom in describing access control policies, which are well-known or invented ones. But the flexibility and expressiveness provided by XACML come at the cost of complexity, verbosity, and lack of desirable-property enforcement. Often common properties for specific access control policies may not be satisfied when these policies are specified in XACML, causing the discrepancy between what the policy authors intend to specify and what the actually specified XACML policies reflect. In this position paper, we propose an approach for conducting conformance checking of access control policies specified in XACML based on existing verification and testing tools for XACML policies.

Inconsistency Management of Role Base Access Control Policy

A Task-Role Based Access Control Model with Multi-Constraints

Inconsistency Resolution Method for RBAC Based Interoperation

Consistency Maintenance for Constraint in Role-Based Access Control Model

Practical Way to Implement Role-Based Access Control in Security Administration System

Detecting conflict of heterogeneous access control policies

Ontology-Based RBAC specification for interoperation in distributed environment

Selective Regression Test for Access Control System Employing RBAC

Conformance Checking of Access Control Policies Specified in XACML

Role Mining and Policy Misconfigurations

Towards accuracy of role-based access control configurations in component-based systems

Multilevel Multi-policy Access Control Model for Collaborative Application

Security Violation Detection for RBAC Based Interoperation in Distributed Environment

Security Policy Consistency

Preprocessing the Noise in Legacy User Permission Assignment Data for Role Mining - an Industrial Practice

Model Checking Access Control Policies: A Case Study using Google Cloud IAM

Detection of Multiple-Duty-Related Security Leakage in Access Control Policies

Role Engineering with SKAOS for Systems Employing RBAC

Separation of Duty Constraint for Permission Based Delegation Model

Principles for Inconsistency

Extended Access Control Model Based on RBAC