RBAC Permission Consistency Static Analysis Framework

摘要：

Role-Based Access Control (RBAC) is a mainstream access control method of software systems. After RBAC policies are formulated, there may be permission inconsistency between RBAC policies and practical execution paths. First, we defined the concept of RBAC permission consistency, and the concepts of execution path, Role Requirement array and Role Holding vector etc. On this basis, we proposed RBAC Permission Consistency Static Analysis Framework, proposed and proved permission consistency decision and Least Privilege principle decision theorems. This paper’s contributions include providing theoretical framework of RBAC permission consistency verification, and providing a methodology for decision of Least Privilege principle. Keywords-permission consistency; access control; static analysis; Least Privilege principle.

作者: WANG Tao LI Wei-hua LIU Zun

作者单位: School of Computer Science and Technology, Northwestern Polytechnical University, Xi’an, China

会议类型: 国际会议

会议名称: 2010年IEEE多媒体信息网络与安全国际会议

会议地点: 南京

会议语种:英文

页码: 506-510

在线出版日期: 2010-11-01（万方平台首次上网日期，不代表论文的发表时间）