ICST
2008
IEEE
13 years 11 months ago
2008
IEEE
We present a model-based approach to testing access control requirements. By using combinatorial testing, we first automatically generate test cases from and without access contro...
ICST
2008
IEEE
13 years 11 months ago
2008
IEEE
If access control policy decision points are not neatly separated from the business logic of a system, the evolution of a security policy likely leads to the necessity of changing...
CSFW
2008
IEEE
13 years 11 months ago
2008
IEEE
Authorization logics provide a principled and flexible approach to specifying access control policies. One of their compelling benefits is that a proof in the logic is evidence ...
CBMS
2008
IEEE
13 years 11 months ago
2008
IEEE
Privacy and security are critical requirements for using patient profiles in distributed healthcare environments. The amalgamation of new information technology with traditional ...
ACSAC
2008
IEEE
13 years 11 months ago
2008
IEEE
Mashups have emerged as a Web 2.0 phenomenon, connecting disjoint applications together to provide unified services. However, scalable access control for mashups is difficult. T...
SOUPS
2009
ACM
13 years 11 months ago
2009
ACM
Existing technologies for file sharing differ widely in the granularity of control they give users over who can access their data; achieving finer-grained control generally requ...
SOUPS
2009
ACM
13 years 11 months ago
2009
ACM
Online social network sites, such as MySpace, Facebook and others have grown rapidly, with hundreds of millions of active users. A new feature on many sites is social applications...
SIGCOMM
2009
ACM
13 years 11 months ago
2009
ACM
Enterprise network security is typically reactive, and it relies heavily on host security and middleboxes. This approach creates complicated interactions between protocols and sys...
SACMAT
2009
ACM
13 years 11 months ago
2009
ACM
XACML does not natively support RBAC and even the specialized XACML profiles are not able to support many relevant constraints such as static and dynamic separation of duty. Exte...
SACMAT
2009
ACM
13 years 11 months ago
2009
ACM
The existence of on-line social networks that include person specific information creates interesting opportunities for various applications ranging from marketing to community o...