Title
A Toolchain for Designing and Testing XACML Policies
Abstract
In modern pervasive application domains, such as Service Oriented Architectures (SOAs) and Peer-to-Peer (P2P) systems, security aspects are critical. Justified confidence in the security mechanisms that are implemented for assuring proper data access is a key point. In the last years XACML has become the de facto standard for specifying policies for access control decisions in many application domains. Briefly, an XACML policy defines the constraints and conditions that a subject needs to comply with for accessing a resource and doing an action in a given environment. Due to the complexity of the language, XACML policy specification is a difficult and error prone process that requires specific knowledge and a high effort to be properly managed.
Year
DOI
Venue
2013
10.1109/ICST.2013.70
Software Testing, Verification and Validation
Keywords
Field
DocType
application domain,key activity,model-driven approach,xacml policy,testing xacml policies,xacml policy definition,security mechanism,access control policy,access control mechanism,initial model,computational complexity,xml,information retrieval,navigation,access control,unified modeling language,de facto standard,formal specification,authorisation,testing
De facto standard,XML,Software engineering,Computer security,Computer science,XACML,Formal specification,Access control,Data access,Reliability engineering,Toolchain,Service-oriented architecture
Conference
ISBN
Citations 
PageRank 
978-1-4673-5961-0
2
0.38
References 
Authors
3
6
Name
Order
Citations
PageRank
Antonia Bertolino11961140.25
Marianne Busch2172.80
Said Daoudagh39911.31
Nora Koch4102278.55
Francesca Lonetti527929.13
Eda Marchetti639241.68