Handling Incomplete Information in Policy Evaluation using Attribute Similarity

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

Samenvatting

Recent years have seen a growing interest in Attribute-based Access Control (ABAC) because it can provide fine-grained, domain independent authorizations suitable for a wide range of applications. One important issue that arises with the evaluation of ABAC policies is that complete information may be unavailable and, thus, the policy decision point may have to reason with and make access decisions based on missing attributes. In this paper, we explore the use of attribute similarity to exploit the available information for decision making. Our approach relies on an attribute graph encoding the relationships and semantic closeness between attributes to compute the similarity between attributes and encompasses a novel probabilistic policy evaluation function to compute a likelihood estimation of reaching a certain decision based on attribute similarity. Determining the applicability of policies based on attribute similarity, however, can introduce the risks of wrongly granting/denying access. To this end, we show how such risks can be quantified and accounted for to reach a conclusive decision.

Originele taal-2Engels
TitelProceedings - 2020 2nd IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications, TPS-ISA 2020
UitgeverijInstitute of Electrical and Electronics Engineers
Pagina's79-88
Aantal pagina's10
ISBN van elektronische versie9781728185439
DOI's
StatusGepubliceerd - okt 2020
Evenement2nd IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications, TPS-ISA 2020 - Virtual, Atlanta, Verenigde Staten van Amerika
Duur: 1 dec 20203 dec 2020

Congres

Congres2nd IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications, TPS-ISA 2020
LandVerenigde Staten van Amerika
StadVirtual, Atlanta
Periode1/12/203/12/20

Vingerafdruk Duik in de onderzoeksthema's van 'Handling Incomplete Information in Policy Evaluation using Attribute Similarity'. Samen vormen ze een unieke vingerafdruk.

Citeer dit