The University of Southampton
University of Southampton Institutional Repository

Security analysis for temporal role based access control

Uzun, Emre, Atluri, Vijayalakshmi, Vaidya, Jaideep, Sural, Shamik, Ferrara, Anna Lisa, Parlato, Gennaro and Madhusudan, P. (2014) Security analysis for temporal role based access control Journal of Computer Security (doi:10.3233/JCS-140510).

Record type: Article

Abstract

Providing restrictive and secure access to resources is a challenging and socially important problem. Among the many formal security models, Role Based Access Control (RBAC) has become the norm in many of today's organizations for enforcing security. For every model, it is necessary to analyze and prove that the corresponding system is secure. Such analysis helps understand the implications of security policies and helps organizations gain confidence on the control they have on resources while providing access, and devise and maintain policies.

In this paper, we consider security analysis for the Temporal RBAC (TRBAC), one of the extensions of RBAC. The TRBAC considered in this paper allows temporal restrictions on roles themselves, user-permission assignments (UA), permission-role assignments (PA), as well as role hierarchies (RH). Towards this end, we first propose a suitable administrative model that governs changes to temporal policies. Then we propose our security analysis strategy, that essentially decomposes the temporal security analysis problem into smaller and more manageable RBAC security analysis sub-problems for which the existing RBAC security analysis tools can be employed. We then evaluate them from a practical perspective by evaluating their performance using simulated data sets.

PDF JCS Paper.pdf - Other
Download (984kB)

More information

Published date: 16 December 2014
Organisations: Electronic & Software Systems

Identifiers

Local EPrints ID: 366414
URI: http://eprints.soton.ac.uk/id/eprint/366414
PURE UUID: 22488ce3-6cee-4b51-b1f6-373dcf4bca44

Catalogue record

Date deposited: 26 Jun 2014 10:51
Last modified: 18 Jul 2017 02:13

Export record

Altmetrics

Contributors

Author: Emre Uzun
Author: Vijayalakshmi Atluri
Author: Jaideep Vaidya
Author: Shamik Sural
Author: Anna Lisa Ferrara
Author: Gennaro Parlato
Author: P. Madhusudan

University divisions

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton: eprints@soton.ac.uk

ePrints Soton supports OAI 2.0 with a base URL of http://eprints.soton.ac.uk/cgi/oai2

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.

×