A Role-Based Administrative Model for Administration of Heterogeneous Access Control Policies and its Security...

Area of Science:

• Computer Science
• Information Security

Background:

• Traditional access control models like RBAC and ABAC struggle with flexible and dynamic policy management.
• Existing unified frameworks like MPBAC lack a complete administrative model for heterogeneous policies.

Purpose of the Study:

• To present a comprehensive role-based administrative model (RAMHAC) for managing heterogeneous access control policies.
• To introduce a novel methodology for analyzing these complex policies.

Main Methods:

• Developed RAMHAC, a role-based administrative model with extensive administrative relations, commands, pre-constraints, and post-constraints.
• Modeled heterogeneous access control policies using Datalog facts for analysis with the μz tool.

Main Results:

• Demonstrated the effectiveness and completeness of the RAMHAC model for managing diverse access control policies.
• Validated the scalability of the proposed policy analysis methodology through comprehensive experiments.

Conclusions:

• RAMHAC provides a robust solution for the administrative challenges of heterogeneous access control policies.
• The novel analysis methodology enhances the understanding and management of complex access control environments.