Logo eprints

Formalisation and Implementation of the XACML Access Control Mechanism

Masi, Massimiliano and Pugliese, Rosario and Tiezzi, Francesco Formalisation and Implementation of the XACML Access Control Mechanism. In: Engineering Secure Software and Systems. Lecture Notes in Computer Science (7159). Springer, pp. 60-74. ISBN 978-3-642-28165-5 (2012)

Download (372kB) | Preview


We propose a formal account of XACML, an OASIS standard adhering to the Policy Based Access Control model for the specifica- tion and enforcement of access control policies. To clarify all ambiguous and intricate aspects of XACML, we provide it with a more manageable alternative syntax and with a solid semantic ground. This lays the basis for developing tools and methodologies which allow software engineers to easily and precisely regulate access to resources using policies. To demonstrate feasibility and effectiveness of our approach, we provide a software tool, supporting the specification and evaluation of policies and access requests, whose implementation fully relies on our formal development.

Item Type: Book Section
Identification Number: 10.1007/978-3-642-28166-2_7
Additional Information: PBAC, XACML, formal semantics, CASE tools - Proceedings of the 2nd International Symposium on Engineering Secure Software and Systems (ESSoS)
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Research Area: Computer Science and Applications
Depositing User: Users 31 not found.
Date Deposited: 02 May 2013 13:36
Last Modified: 02 May 2013 13:36
URI: http://eprints.imtlucca.it/id/eprint/1575

Actions (login required)

Edit Item Edit Item