Policy-based management of computer systems, computer networks and devices is a critical
technology especially for present and future systems characterized by large-scale systems …

Access control policies may contain anomalies such as incompleteness and inconsistency,
which can result in security vulnerabilities. Detecting such anomalies in large sets of …

Abstract The eXtensible Access Control Markup Language (XACML) has attracted
significant attention from both industry and academia, and has become the de facto standard …

We describe the formalization of a correctness proof for a conflict detection algorithm for
firewalls in the Coq Proof Assistant. First, we give formal definitions in Coq of a firewall …

Policy-based access control systems are crucial for secure information sharing in
collaborative applications. However, policy management needs to be flexible in order to …

Technology advances in areas such as sensors, IoT, and robotics, enable new collaborative
applications (eg, autonomous devices). A primary requirement for such collaborations is to …

We introduce a new methodology for formulating, analyzing, and applying access-control
policies. Policies are expressed as formal theories in the SMT (satisfiability-modulo-theories) …

Validation and verification of security policies is a critical and important task to ensure that
access control policies are error free. The two most common problems present in access …

Organizations (eg, hospitals, university etc.) are custodians of data on their clients and use
this information to improve their service. Personal data of an individual therefore ends up …

In an embodiment, a method is provided for prefetching attributes used in access control
evaluation. In this method, an access control policy that comprises rules is retrieved. These …