Ítem
Solo Metadatos

Managing XACML Systems in Distributed Environments through Meta-Policies

Mostrar el registro sencillo de la publicación
dc.creatorDíaz López, Daniel Orlandospa
dc.creatorDólera Tormo,Ginésspa
dc.creatorMármol Gómez, Félixspa
dc.creatorMartínez Pérez, Gregoriospa
dc.date.accessioned2020-08-19T14:45:48Z
dc.date.available2020-08-19T14:45:48Z
dc.date.created2015-01-02spa
dc.description.abstractPolicy-based authorization systems have been largely deployed nowadays to control different privileges over a big amount of resources within a security domain. With policies it is possible to reach a fine-grained level of expressiveness to state proper responses of a system against multiple access control requests. In this context, XACML has achieved a big popularity between both industry and academy as a standard for the definition of access control policies, as well as an architecture for the evaluation of authorization requests and for the issuing of authorization decisions. However, the applicability of XACML is still not clear in collaborative and distributed environments composed of several security domains sharing the access control over some specific resources. Such a circumstance manifests when many security domains can simultaneously define the behavior that a resource will have upon received authorization requests, like for instance an organization with many subsidiaries, a company with a service virtualization business model, etc. In this paper we propose a solution to reach an effective distributed policy management considering that a number of policies in one domain may be confidential. To this end, the default XACML architecture has been redefined in order to use i) Master and Slave PAPs to communicate security domains, ii) Meta-Policies to define privileges over access control policies (the policies become the managed resources) and iii) SAML extensions to protect the policy management messages which flow between security domains. The experiments and the defined scenarios in the paper prove the validity of the proposed solution.eng
dc.format.mimetypeapplication/pdf
dc.identifier.doihttps://doi.org/10.1016/j.cose.2014.10.004
dc.identifier.issnISSN: 0167-4048
dc.identifier.urihttps://repository.urosario.edu.co/handle/10336/28106
dc.language.isoengspa
dc.publisherElsevierspa
dc.relation.citationEndPage115
dc.relation.citationStartPage92
dc.relation.citationTitleComputers and Security
dc.relation.citationVolumeVol. 48
dc.relation.ispartofComputers and Security, ISSN:0167-4048, Vol.48 (February, 2015); pp. 92-115spa
dc.relation.urihttps://www.sciencedirect.com/science/article/pii/S0167404814001503spa
dc.rights.accesRightsinfo:eu-repo/semantics/restrictedAccess
dc.rights.accesoRestringido (Acceso a grupos específicos)spa
dc.sourceComputers and Securityspa
dc.source.instnameinstname:Universidad del Rosario
dc.source.reponamereponame:Repositorio Institucional EdocUR
dc.subject.keywordXACMLAccess control systemspa
dc.subject.keywordDistributed environmentsspa
dc.subject.keywordSAMLAccess control policyspa
dc.subject.keywordPolicy managementspa
dc.titleManaging XACML Systems in Distributed Environments through Meta-Policiesspa
dc.title.TranslatedTitleGestión de sistemas XACML en entornos distribuidos mediante metapolíticasspa
dc.typearticleeng
dc.type.hasVersioninfo:eu-repo/semantics/publishedVersion
dc.type.spaArtículospa
Archivos
Colecciones
Artículos