Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)最新文献_第5页

Privacy in the Semantic Web: What Policy Languages Have to Offer 语义网中的隐私:策略语言必须提供什么

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.39

Claudiu Duma, Almut Herzog, N. Shahmehri

{"title":"Privacy in the Semantic Web: What Policy Languages Have to Offer","authors":"Claudiu Duma, Almut Herzog, N. Shahmehri","doi":"10.1109/POLICY.2007.39","DOIUrl":"https://doi.org/10.1109/POLICY.2007.39","url":null,"abstract":"Uncontrolled disclosure of sensitive information during electronic transactions may expose users to threats like loss of privacy and identity theft. The means envisioned for addressing protection of security and privacy in the context of the Semantic Web are policy languages for trust establishment and management. Although a number of policy languages have been proposed, it is unclear how well each language can address users' privacy concerns. The contribution of this work is an independent, scenario-based comparison of six prominent policy languages, namely Protune, Rei, Ponder, Trust-X, KeyNote and P3P-APPEL, with respect to the needs that users have in protecting their personal, sensitive data. We present how each language addresses access control for objects, such as user credentials and sensitive policies. We evaluate how each language defines or imports hierarchies of resources, whether the language supports protection of user information after it has been released, whether the language supports the principle of least privilege and more. The evaluation is not only an analytical literature study but also rich in actual implementations in all six languages.","PeriodicalId":240693,"journal":{"name":"Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129669488","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 47

Deriving Enforcement Mechanisms from Policies 从政策派生执行机制

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.15

H. Janicke, A. Cau, F. Siewe, H. Zedan

引用次数: 25

Authorisation and Conflict Resolution for Hierarchical Domains 分层域的授权和冲突解决

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-01 DOI: 10.1109/POLICY.2007.8

G. Russello, Changyu Dong, Naranker Dulay

引用次数: 69

Identity Delegation in Policy Based Systems 基于策略系统中的身份委托

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2006-06-12 DOI: 10.1109/POLICY.2007.26

Rajeev Gupta, Shourya Roy, M. Bhide

{"title":"Identity Delegation in Policy Based Systems","authors":"Rajeev Gupta, Shourya Roy, M. Bhide","doi":"10.1109/POLICY.2007.26","DOIUrl":"https://doi.org/10.1109/POLICY.2007.26","url":null,"abstract":"Policy based systems have received considerable attention in the recent past from academia as well as the industry. Research on policy based systems encompasses a gamut of areas such as: models and languages for policy based systems, policy standards, domain specific implementations, policy tools etc. However an important issue, which did not receive much attention from researchers, is that of access control for policy execution. In this paper we present the concept of \"identity delegation\" which involves finding the 'correct' users/ identities, to whom task of policy execution can be delegated. Policies are generally defined by high level business executives (policy authors) and are implemented by policy enforcers who have sufficient access rights on the underlying systems. Given the increasing complexity of enterprise systems, we show in this paper that finding the right policy enforcers for a policy can be a fairly non-trivial task. We address this important problem by proposing a unique concept of 'implicit identity delegation', whereby an autonomic system automatically figures out the correct policy enforcers and implicitly delegates the task of policy execution. We present the Implicit Identity Delegation architecture which boasts of an efficient technique for performing implicit identity delegation and uses a plugin based architecture ensuring its applicability and use in diverse domains.","PeriodicalId":240693,"journal":{"name":"Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-06-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131178062","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5