Grid systems, which are composed of autonomous domains, are open and dynamic. In such systems, there are usually a large number of users, the users are changeable, and different domains have their own policies. The traditional access control models that are identity based are closed and inflexible. The Attribute Based Access Control (ABAC) model, which makes decisions relying on attributes of r...

Generic control operators, such as fold, have been introduced in functional programming to increase the power and applicability of data-structure-based transformations. This is achieved by making the structure of the data more explicit in program speciications. We argue that this very important property is one of the original concepts of attribute grammars. In this paper, we informally show the...

Recently, attribute based access control (ABAC )has received considerable attention from the secu-rity community for its policy flexibility and dynamicdecision making capabilities. In ABAC, authoriza-tion decisions are made based on various attributesof entities involved in the access (e.g., users, sub-jects, objects, context, etc.). In an ABAC system,a proper attrib...

Role-based access control (RBAC) is a commercially dominant model, standardized by the National Institute of Standards and Technology (NIST). Although RBAC provides compelling benefits for security management it has several known deficiencies such as role explosion, wherein multiple closely related roles are required (e.g., attendingdoctor role is separately defined for each patient). Numerous ...

In this work, we present a methodology for the quantitative evaluation and comparison of Web site quality called Web-site Quality Evaluation Method (QEM). The core models and procedures for artifact evaluation are supported by the Logic Scoring of Preference (LSP) model and continuous preference logic as mathematical background. We discuss the process steps that the evaluators should follow by ...