Poster: A Flexible Relationship-Based Access Control Policy Generator

Stanley Clark; Nikolay Yakovets; George H.L. Fletcher; Nicola Zannone

doi:10.1145/3532105.3535032

Poster: A Flexible Relationship-Based Access Control Policy Generator

Stanley Clark, Nikolay Yakovets, George H.L. Fletcher, Nicola Zannone

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

Abstract

A plethora of Relationship-Based Access Control (ReBAC) models have been proposed, varying in the types of policies they can express. This fragmentation has stifled the creation of a benchmark to directly compare the performance of ReBAC systems based on their common supported policies. To solve this problem, we propose RACON, a schema-driven, customisable ReBAC policy generator. RACON generates policies in an intermediate language subsuming the features required to encode existing ReBAC models. This language can subsequently be translated to popular ReBAC policy languages through an extensible translation module. Taking a view of ReBAC policies as graph queries, we implement translations into two popular graph query languages, namely Cypher and SPARQL.

Original language	English
Title of host publication	SACMAT 2022 - Proceedings of the 27th ACM Symposium on Access Control Models and Technologies
Publisher	Association for Computing Machinery, Inc.
Pages	263-265
Number of pages	3
ISBN (Electronic)	9781450393577
DOIs	https://doi.org/10.1145/3532105.3535032
Publication status	Published - 7 Jun 2022
Event	27th ACM Symposium on Access Control Models and Technologies, SACMAT 2022 - Virtual, Online, United States Duration: 8 Jun 2022 → 10 Jun 2022

Conference

Conference	27th ACM Symposium on Access Control Models and Technologies, SACMAT 2022
Country/Territory	United States
City	Virtual, Online
Period	8/06/22 → 10/06/22

Bibliographical note

Publisher Copyright:
© 2022 Owner/Author.

Keywords

benchmark
policy generation
relationship-based access control

Access to Document

10.1145/3532105.3535032

Cite this

@inproceedings{d8e8e60e07464196a064159bcb33cef6,

title = "Poster: A Flexible Relationship-Based Access Control Policy Generator",

abstract = "A plethora of Relationship-Based Access Control (ReBAC) models have been proposed, varying in the types of policies they can express. This fragmentation has stifled the creation of a benchmark to directly compare the performance of ReBAC systems based on their common supported policies. To solve this problem, we propose RACON, a schema-driven, customisable ReBAC policy generator. RACON generates policies in an intermediate language subsuming the features required to encode existing ReBAC models. This language can subsequently be translated to popular ReBAC policy languages through an extensible translation module. Taking a view of ReBAC policies as graph queries, we implement translations into two popular graph query languages, namely Cypher and SPARQL.",

keywords = "benchmark, policy generation, relationship-based access control",

author = "Stanley Clark and Nikolay Yakovets and Fletcher, {George H.L.} and Nicola Zannone",

note = "Publisher Copyright: {\textcopyright} 2022 Owner/Author.; 27th ACM Symposium on Access Control Models and Technologies, SACMAT 2022 ; Conference date: 08-06-2022 Through 10-06-2022",

year = "2022",

month = jun,

day = "7",

doi = "10.1145/3532105.3535032",

language = "English",

pages = "263--265",

booktitle = "SACMAT 2022 - Proceedings of the 27th ACM Symposium on Access Control Models and Technologies",

publisher = "Association for Computing Machinery, Inc.",

address = "United States",

}

Clark, S, Yakovets, N , Fletcher, GHL & Zannone, N 2022, Poster: A Flexible Relationship-Based Access Control Policy Generator. in SACMAT 2022 - Proceedings of the 27th ACM Symposium on Access Control Models and Technologies. Association for Computing Machinery, Inc., pp. 263-265, 27th ACM Symposium on Access Control Models and Technologies, SACMAT 2022, Virtual, Online, United States, 8/06/22. https://doi.org/10.1145/3532105.3535032

Poster: A Flexible Relationship-Based Access Control Policy Generator. / Clark, Stanley; Yakovets, Nikolay ; Fletcher, George H.L. et al.
SACMAT 2022 - Proceedings of the 27th ACM Symposium on Access Control Models and Technologies. Association for Computing Machinery, Inc., 2022. p. 263-265.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Poster

T2 - 27th ACM Symposium on Access Control Models and Technologies, SACMAT 2022

AU - Clark, Stanley

AU - Yakovets, Nikolay

AU - Fletcher, George H.L.

AU - Zannone, Nicola

PY - 2022/6/7

Y1 - 2022/6/7

N2 - A plethora of Relationship-Based Access Control (ReBAC) models have been proposed, varying in the types of policies they can express. This fragmentation has stifled the creation of a benchmark to directly compare the performance of ReBAC systems based on their common supported policies. To solve this problem, we propose RACON, a schema-driven, customisable ReBAC policy generator. RACON generates policies in an intermediate language subsuming the features required to encode existing ReBAC models. This language can subsequently be translated to popular ReBAC policy languages through an extensible translation module. Taking a view of ReBAC policies as graph queries, we implement translations into two popular graph query languages, namely Cypher and SPARQL.

AB - A plethora of Relationship-Based Access Control (ReBAC) models have been proposed, varying in the types of policies they can express. This fragmentation has stifled the creation of a benchmark to directly compare the performance of ReBAC systems based on their common supported policies. To solve this problem, we propose RACON, a schema-driven, customisable ReBAC policy generator. RACON generates policies in an intermediate language subsuming the features required to encode existing ReBAC models. This language can subsequently be translated to popular ReBAC policy languages through an extensible translation module. Taking a view of ReBAC policies as graph queries, we implement translations into two popular graph query languages, namely Cypher and SPARQL.

KW - benchmark

KW - policy generation

KW - relationship-based access control

UR - http://www.scopus.com/inward/record.url?scp=85132437202&partnerID=8YFLogxK

U2 - 10.1145/3532105.3535032

DO - 10.1145/3532105.3535032

M3 - Conference contribution

AN - SCOPUS:85132437202

SP - 263

EP - 265

BT - SACMAT 2022 - Proceedings of the 27th ACM Symposium on Access Control Models and Technologies

PB - Association for Computing Machinery, Inc.

Y2 - 8 June 2022 through 10 June 2022

ER -

Poster: A Flexible Relationship-Based Access Control Policy Generator

Abstract

Conference

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this