On context in authorization policy

Patrick McDaniel
2003 Proceedings of the eighth ACM symposium on Access control models and technologies - SACMAT '03  
Authorization policy infrastructures are evolving with the complex environments that they support. However, the requirements and technologies supporting context are not yet well understood. Often implemented as condition functions or predefined attributes, context is used to more precisely control when and how policy is enforced. This paper considers context requirements and services in authorization policy. The properties and security requirements of context evaluation are classified. A key
more » ... lassified. A key observation gleaned from this classification is the degree to which context functions share common properties. The Antigone Condition Framework (ACF) exploits these commonalities to provide a general purpose condition service and associated API. The prototype ACF design is presented and illustrated, and directions for future work considered. General Terms Security
doi:10.1145/775412.775422 dblp:conf/sacmat/McDaniel03 fatcat:37pmst33pbfffjy62pd6b4cjbi