Ensuring the confidentiality, integrity, and availability of sensitive data in cloud environments
relies heavily on the robust management of cryptographic keys. With the expansion of cloud …

Cedar is a new authorization policy language designed to be ergonomic, fast, safe, and
analyzable. Rather than embed authorization logic in an application's code, developers can …

Cedar is a new authorization policy language designed to be ergonomic, fast, safe, and
analyzable. Rather than embed authorization logic in an application's code, developers can …

As our lives, our businesses, and indeed our world economy become increasingly reliant on
the secure operation of many interconnected software systems, the software engineering …

quacky is a tool for quantifying permissiveness of access control policies in the cloud. Given
a policy, quacky translates it into a SMT formula and uses a model counting constraint solver …

With the growing prevalence of cloud computing, providing secure access to information
stored in the cloud has become a critical problem. Due to the complexity of access control …

Existing access policy languages like Cedar equipped with SMT-based automated
reasoning capabilities are effective in providing formal guarantees about the policies …

In this paper, we present an access control verification approach for Role-Based Access
Control (RBAC) mechanisms. Given a specification that models security boundaries (eg …

Identity and Access Management (IAM) is an access control service in cloud platforms. To
securely manage cloud resources, customers are required to configure IAM to specify the …

Users increasingly create, manage and share digital resources, including sensitive data, via
cloud platforms and APIs. Platforms encode the rules governing access to these resources …