نتایج جستجو برای: xacml

تعداد نتایج: 771  

2005
Nelly Delessy Eduardo B. Fernandez

Web services are becoming the way for enterprises to interoperate. Many security standards for them have been developed; one of these is XACML (eXtensible Access Control Markup Language). XACML has been defined by OASIS and it includes a policy, an access decision language, and a specialized web services policy language. We present here three architectural patterns for XACML. The XACML Authoriz...

Journal: :CoRR 2015
Carroline Dewi Puspa Kencana Ramli

Recently, XACML is a popular access control policy language that is used widely in many applications. Policies in XACML are built based on many components over distributed resources. Due to the expressiveness of XACML, it is not trivial for policy administrators to understand the overall effect and consequences of XACML policies they have written. In this paper we show a mechanism and a tool ho...

Journal: :Int. Arab J. Inf. Technol. 2014
Abd El-Aziz Abd El-Aziz Arputharaj Kannan

Although eXtensible Access Control Markup Language (XACML) is recognized as a precise and a complete policy description language, the structure of the current XACML policy is complex. Hence, users need to understand XACML well and write down the securing policy all by hand, which make it difficult to master and use. On the other hand, RDBMS is easy and simple to use by all users and allows hidi...

2015
Joohyung Lee Yi Wang Yu Zhang

XACML is an XML-based declarative access control language standardized by OASIS. Its latest version 3.0 has several new features including the concept of delegation for decentralized administration of access control. Though it is important to avoid unintended consequences of ill-designed policies, delegation makes formal analysis of XACML policies highly complicated. In this paper, we present a...

2008
Erik Rissanen Ludwig Seitz

The XACML standard defines an XML based language for defining access control policies and a related processing model. Recent work aims to add delegation to XACML in order to express the right to administrate XACML policies within XACML itself. The delegation profile draft explains how to validate the right to issue a policy, but there are no provisions for removing a policy. This paper proposes...

2015
Khalid Alissa Jason Reid Ed Dawson Farzad Salim

XACML has become the defacto standard for enterprisewide, policy-based access control. It is a structured, extensible language that can express and enforce complex access control policies. There have been several efforts to extend XACML to support specific authorisation models, such as the OASIS RBAC profile to support Role Based Access Control. A number of proposals for authorisation models th...

2004
Emir Toktar Edgard Jamhour Carlos Maziero

This work proposes a XML-based framework for distributing and enforcing RSVP access control policies, for RSVP-aware application servers. Policies are represented by extending XACML, the general purpose access control language proposed by OASIS. Because RSVP is a specific application domain, it is not directly supported by the XACML standard. Hence, this work defines the XACML extensions requir...

2014
Donia El Kateb Yehia Elrakaiby Tejeddine Mouelhi Iram Rubab Yves Le Traon

Policy-based systems rely on the separation of concerns, by implementing independently a software system and its associated security policy. XACML (eXtensible Access Control Markup Language) proposes a conceptual architecture and a policy language to reflect this ideal design of policy-based systems. However, while rights are well-captured by authorizations, duties, also called obligations, are...

Journal: :Science of Computer Programming 2014

2009
Piervito G. Scaglioso Cataldo Basile Antonio Lioy

Access control in distributed systems is a complex problem that can be tackled in several ways. The XACML standard provides a possible solution, with several benefits and some drawbacks. In this paper we investigate the concepts behind distributed access control, review the XACML standard, and provide practical suggestions about the components to be used in building a XACML-based distributed ac...

نمودار تعداد نتایج جستجو در هر سال

با کلیک روی نمودار نتایج را به سال انتشار فیلتر کنید