Auto-generation of least privileges access control policies for applications supported by user input recognition
Abstract
References
Recommendations
Auto-generating access control policies for applications by static analysis with user input recognition
SESS '10: Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure SystemsApplications are typically executed in the security context of the user. Nonetheless, they do not need all the access rights. Since software vulnerabilities based attacks are not rare nowadays, executing applications with minimal rights (least ...
Configuring role-based access control to enforce mandatory and discretionary access control policies
Access control models have traditionally included mandatory access control (or lattice-based access control) and discretionary access control. Subsequently, role-based access control has been introduced, along with claims that its mechanisms are general ...
Self-Generation of Access Control Policies
SACMAT '18: Proceedings of the 23nd ACM on Symposium on Access Control Models and TechnologiesAccess control for information has primarily focused on access statically granted to subjects by administrators usually in the context of a specific system. Even if mechanisms are available for access revocation, revocations must still be executed ...
Comments
Information & Contributors
Information
Published In
Publisher
Springer-Verlag
Berlin, Heidelberg
Publication History
Qualifiers
- Chapter
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- 0Total Citations
- 0Total Downloads
- Downloads (Last 12 months)0
- Downloads (Last 6 weeks)0