In a distributed multi-user environment, the security policy must not only specify legitimate user privileges but also aid in the detection of the abuse of the privileges and adapt to perceived system threat conditions. We present an authorization framework, which enables the representation and enforcement of advanced security policies. Our approach is based on expanding the policy evaluation mechanism with the ability to generate real time actions, such as checking the current system threat level and sending a notification.
In REF advanced security policies are presented that define legitimate user privileges on resources, can adapt to system threat levels and detect abuse of privilege.
The specification and enforcement of advanced security policies
Proceedings Third International Workshop on Policies for Distributed Systems and Networks
Proceedings Third International Workshop on Policies for Distributed Systems and Networks
Computer Science