Document - Monitoring of access control policy for refinement and improvements

2018

Conference article Closed Access

Monitoring of access control policy for refinement and improvements

Calabró A., Lonetti F., Marchetti E.

Access control policy Coverage criteria KPI Monitoring

Access Control is among the most important security mechanisms to put in place in order to secure applications, and XACML is the de facto standard for defining access control policies. As systems and resource utilization evolve, access control policies become increasingly difficult to manage and update according to contextual behaviour. This paper proposes a policy monitoring infrastructure able to identify policy abnormal behaviour and prevent misuse in granting/denying further accesses. This proposal relies on coverage adequacy criteria as well as KPIs definition for assessing the most common usage behaviors and provide feedback for refinement and maintenance of the current access control policy. It integrates a flexible and adaptable event based monitoring facility for run time validation of policy execution. A first validation on an example shows the effectiveness of the proposed approach.

Source: SWQD 2018: Software Quality: Methods and Tools for Better Software and Systems, pp. 17–36, Vienna, Austria, 16-19/1/2018

Metrics

Back to previous page

Cite as

BibTeX entry

@inproceedings{oai:it.cnr:prodotti:384809,
	title = {Monitoring of access control policy for refinement and improvements},
	author = {Calabró A. and Lonetti F. and Marchetti E.},
	doi = {10.1007/978-3-319-71440-0_2},
	booktitle = {SWQD 2018: Software Quality: Methods and Tools for Better Software and Systems, pp. 17–36, Vienna, Austria, 16-19/1/2018},
	year = {2018}
}