Istituto di Informatica e Telematica     
Faiella M. F., Martinelli F., Mori P., Saracino A., Sheikhalishahi M. Collaborative Attribute Retrieval in Environment with Faulty Attribute Managers. In: ARES 2016 - 11th International Conference on Availability, Reliability and Security (Salisburgo, Austria, 31-08 2016). Proceedings, pp. 1 - 8. IEEE, 2016.
Attributes describing the features of subjects, objects and of the environment are used in access and usagecontrol models to determine the right of a subject to use an object in a given environment. Hence, it is crucial for the effective enforcement of access and usage policies that authorization systems are able to promptly retrieve the values of the required attributes from the Attribute Providers. However, sometimes attribute providers could not respond when queried by Authorization systems, because they could be temporary down or unreachable. This could affect the decision processes, causing some requests to be unduly denied or some ongoing accesses to be unduly interrupted. This paper proposes a strategy that can beadopted by an Authorization system to estimate the value of the attributes it requires when the corresponding attribute providers are not responding. This strategy leverages on the collaboration ofthe other Authorization systems which exploit the same attribute providers, and which could have cached a value for the required attributes. We validate the presented approach through a set ofsimulative experiments which consider the presence of malicious authorization systems in the cooperative environment.
DOI: 10.1109/ARES.2016.51
Subject attribute providers
K.6.5 Security and protection

Icona documento 1) Download Document PDF

Icona documento Open access Icona documento Restricted Icona documento Private


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional