English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Access control systems are widely used means for the protection of computingsystems. They are defined in terms of access control policies regulating theaccesses to system resources. In this paper, we introduce a formally-defined,fully-implemented framework for specification, analysis and enforcement ofattribute-based access control policies. The framework rests on FACPL, alanguage with a compact, yet expressive, syntax for specification of real-worldaccess control policies and with a rigorously defined denotational semantics.The framework enables the automatic verification of properties regarding boththe authorisations enforced by single policies and the relationships amongmultiple policies. Effectiveness and performance of the analysis rely on asemantic-preserving representation of FACPL policies in terms of SMT formulaeand on the use of efficient SMT solvers. Our analysis approach explicitlyaddresses some crucial aspects of policy evaluation, as e.g. missingattributes, erroneous values and obligations, which are instead overlooked inother proposals. The framework is supported by Java-based tools, among which anEclipse- based IDE offering a tailored development and analysis environment forFACPL policies and a Java library for policy enforcement. We illustrate theframework and its formal ingredients by means of an e-Health case study, whileits effectiveness is assessed by means of performance stress tests andexperiments on a well-established benchmark.

A Rigorous Framework for Specification, Analysis and Enforcement of Access Control Policies