Paper Info
Title
On Safety in Discretionary Access Control
Abstract
An apparently prevailing myth is that safety is undecidable in Discretionary Access Control (DAC); therefore, one needs to invent new DAC schemes in which safety analysis is decidable. In this paper, we dispel this myth. We argue that DAC should not be equated with the Harrison-Ruzzo-Ullman access matrix scheme, in which safety is undecidable. We present an efficient (running time cubic in its input size) algorithm for deciding safety in the Graham-Denning DAC scheme, which subsumes the DAC schemes used in the literature on comparing DAC with other access control models. We also counter several claims made in recent work by Solworth and Sloan, in which the authors present a new access control scheme based on labels and relabelling and assert that it can implement the full range of DAC models. We present a precise characterization of their access control scheme and show that it does not adequately capture a relatively simple DAC scheme.
Year
DOI
Venue
2005
10.1109/SP.2005.14
IEEE Symposium on Security and Privacy
Keywords
DocType
ISSN
access control model,access control scheme,harrison-ruzzo-ullman access matrix scheme,discretionary access control,safety analysis,dac model,new access control scheme,dac scheme,new dac scheme,graham-denning dac scheme,simple dac scheme,authorisation,decidability,computational complexity,security,access control,privacy
Conference
1081-6011
ISBN
Citations 
PageRank 
0-7695-2339-0
16
0.80
References 
Authors
24
2
Name
Order
Citations
PageRank
Ninghui Li15863305.02
Mahesh V. Tripunitara255833.06