A Flexible Authorization Framework

View Sample PDF

Author(s): Duminda Wijesekera (George Mason University, USA)and Sushil Jajodia (George Mason University, USA)
Copyright: 2008
Pages: 21
Source title: Information Security and Ethics: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Hamid Nemati (The University of North Carolina at Greensboro, USA)
DOI: 10.4018/978-1-59904-937-3.ch085

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View A Flexible Authorization Framework on the publisher's website for pricing and purchasing information.

Abstract

Advances in application areas such as Internet-based transactions, cooperating coalitions, and workflow systems have brought new challenges to access control. In order to meet the diverse needs of emerging applications, it has become necessary to support multiple access control policies in one security domain. This chapter describes an authorization framework, referred to as the Flexible Authorization Framework (FAF), which is capable of doing so. FAF is a logic-based framework in which authorizations are specified in terms of a locally stratified rule base. FAF allows permissions and prohibitions to be included in its specification. FAF specifications can be changed by deleting and inserting its rules. We also describe FAF’s latest additions, such as revoking granted permissions, provisional authorizations, and obligations.

The IRMA Community

Research IRM

A Flexible Authorization Framework

Purchase

Abstract

Related Content

IRMA Sponsors