D-algebra for composing access control policy decisions

Qun Ni, Elisa Bertino, Jorge Lobo
2009 Proceedings of the 4th International Symposium on Information, Computer, and Communications Security - ASIACCS '09  
This paper proposes a D-algebra to compose decisions from multiple access control policies. Compared to other algebrabased approaches aimed at policy composition, D-algebra is the only one that satisfies both functional completeness (any possible decision matrix can be expressed by a D-algebra formula) and computational effectiveness (a formula can be computed efficiently given any decision matrix). The Dalgebra has several relevant applications in the context of access control policies, namely
more » ... the analysis of policy languages decision mechanisms, and the development of tools for policy authoring and enforcement.
doi:10.1145/1533057.1533097 dblp:conf/ccs/NiBL09 fatcat:566vmz76jnfdrgkwsrkek2qj5i