strategies for incorporating delegation into attribute
play

Strategies for Incorporating Delegation into Attribute-Based Access - PowerPoint PPT Presentation

Jun 20, 2023 •297 likes •1.05k views

Strategies for Incorporating Delegation into Attribute-Based Access Control (ABAC) Sylvia L. Osborn Daniel Servos sylvia@csd.uwo.ca dservos5@uwo.ca Department of Computer Science The 9th International Symposium on Foundations & Practice

  1. Strategies for Incorporating Delegation into Attribute-Based Access Control (ABAC) Sylvia L. Osborn Daniel Servos sylvia@csd.uwo.ca dservos5@uwo.ca Department of Computer Science The 9th International Symposium on Foundations & Practice of Security, October 2016 Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 1 / 22

  2. Talk Outline Outline 1 Background 2 Strategies for Incorporating Delegation 3 Attribute Delegation Group Membership Delegation Permission Delegation Qualitative Evaluation 4 Conclusions and Future Work 5 Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 2 / 22

  3. ABAC Background Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  4. ABAC Background Role-Based Access Control (RBAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  5. ABAC Background Role-Based Access Control (RBAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  6. ABAC Background Role-Based Access Control (RBAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  7. ABAC Background Attribute-Based Access Control (ABAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  8. ABAC Background Attribute-Based Access Control (ABAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  9. ABAC Background Attribute-Based Access Control (ABAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  10. ABAC Background Attribute-Based Access Control (ABAC) Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 3 / 22

  11. Delegation Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 4 / 22

  12. Delegation Key components of delegation: Delegators Delegatable Access Control Elements Delegatees Delegatable Elements Delegator Delegatee Delegates Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 4 / 22

  13. Delegation Components In RBAC: Delegators: Users Delegatable Access Control Elements: Role Membership Permissions (via temporary role) Delegatees: Users Role Membership User User Delegates Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 4 / 22

  14. Delegation Components In ABAC: Delegators: Delegatable Access Control Elements: Delegatees: Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 5 / 22

  15. Delegation Components In ABAC: Delegators: Users Groups Delegatable Access Control Elements: Delegatees: Users Groups Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 5 / 22

  16. Delegation Components In ABAC: Delegators: Users Groups Delegatable Access Control Elements: Delegatees: Users Groups Attributes Policies Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 5 / 22

  17. Delegation Components In ABAC: Delegators: Users Groups Delegatable Access Control Elements: Attributes Permissions Group Membership Delegatees: Users Groups Attributes Policies Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 5 / 22

  18. Strategy Graph Delegated Delegators Delegatees Element Delegates Delegated What To Attributes Users Users Groups Permissions Attributes Groups Group Policies Membership Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 6 / 22

  19. Strategy Graph Delegated Delegators Delegatees Element Delegates Delegated What To Attributes Users Users Groups Permissions Attributes Groups Group Policies Membership User-to-User Permission Delegation Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 6 / 22

  20. Strategy Graph Delegated Delegators Delegatees Element Delegates Delegated What To Attributes Users Users Groups Permissions Attributes Groups Group Policies Membership Group-to-Policy Attribute Delegation Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 6 / 22

  21. Delegation Strategies Delegation Strategy Families Strategy Name Delegator Delegated Element Delegatee Attribute Delegation User-to-User Attribute Delegation User Attribute Set User User-to-Group Attribute Delegation User Attribute Set Group Group-to-Group Attribute Delegation Group Attribute Set Group Group-to-User Attribute Delegation Group Attribute Set User User-to-Attribute Attribute Delegation User Attribute Set Attribute Group-to-Attribute Attribute Delegation Group Attribute Set Attribute User-to-Policy Attribute Delegation User Attribute Set Policy Group-to-Policy Attribute Delegation Group Attribute Set Policy Group Membership Delegation User-to-User Membership Delegation User Group Membership User Group-to-User Membership Delegation Group Group Membership User Group-to-Group Membership Delegation Group Group Membership Group User-to-Group Membership Delegation User Group Membership Group User-to-Attribute Membership Delegation User Group Membership Attribute Group-to-Attribute Membership Delegation Group Group Membership Attribute User-to-Policy Membership Delegation User Group Membership Policy Group-to-Policy Membership Delegation Group Group Membership Policy Permission Delegation User-to-User Permission Delegation User Permission Set User User-to-Group Permission Delegation User Permission Set Group Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 7 / 22 Group-to-User Permission Delegation Group Permission Set User

  22. Delegation Strategies Delegation Strategy Families Strategy Name Delegator Delegated Element Delegatee Attribute Delegation User-to-User Attribute Delegation User Attribute Set User User-to-Group Attribute Delegation User Attribute Set Group Group-to-Group Attribute Delegation Group Attribute Set Group Group-to-User Attribute Delegation Group Attribute Set User User-to-Attribute Attribute Delegation User Attribute Set Attribute Group-to-Attribute Attribute Delegation Group Attribute Set Attribute User-to-Policy Attribute Delegation User Attribute Set Policy Group-to-Policy Attribute Delegation Group Attribute Set Policy Group Membership Delegation User-to-User Membership Delegation User Group Membership User Group-to-User Membership Delegation Group Group Membership User Group-to-Group Membership Delegation Group Group Membership Group User-to-Group Membership Delegation User Group Membership Group User-to-Attribute Membership Delegation User Group Membership Attribute Group-to-Attribute Membership Delegation Group Group Membership Attribute User-to-Policy Membership Delegation User Group Membership Policy Group-to-Policy Membership Delegation Group Group Membership Policy Permission Delegation User-to-User Permission Delegation User Permission Set User User-to-Group Permission Delegation User Permission Set Group Group-to-User Permission Delegation Group Permission Set User Group-to-Group Permission Delegation Group Permission Set Group User-to-Attribute Permission Delegation User Permission Set Attribute Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 7 / 22 Group-to-Attribute Permission Delegation User Permission Set Attribute

  23. Strategy Name Delegator Delegated Element Delegatee Delegation Strategies Attribute Delegation User-to-User Attribute Delegation User Attribute Set User User-to-Group Attribute Delegation User Attribute Set Group Group-to-Group Attribute Delegation Group Attribute Set Group Group-to-User Attribute Delegation Group Attribute Set User User-to-Attribute Attribute Delegation User Attribute Set Attribute Group-to-Attribute Attribute Delegation Group Attribute Set Attribute User-to-Policy Attribute Delegation User Attribute Set Policy Group-to-Policy Attribute Delegation Group Attribute Set Policy Group Membership Delegation User-to-User Membership Delegation User Group Membership User Group-to-User Membership Delegation Group Group Membership User Group-to-Group Membership Delegation Group Group Membership Group User-to-Group Membership Delegation User Group Membership Group User-to-Attribute Membership Delegation User Group Membership Attribute Group-to-Attribute Membership Delegation Group Group Membership Attribute User-to-Policy Membership Delegation User Group Membership Policy Group-to-Policy Membership Delegation Group Group Membership Policy Permission Delegation User-to-User Permission Delegation User Permission Set User User-to-Group Permission Delegation User Permission Set Group Group-to-User Permission Delegation Group Permission Set User Group-to-Group Permission Delegation Group Permission Set Group User-to-Attribute Permission Delegation User Permission Set Attribute Group-to-Attribute Permission Delegation User Permission Set Attribute User-to-Policy Permission Delegation User Permission Set Policy Group-to-Policy Permission Delegation Group Permission Set Policy Daniel Servos & Sylvia L. Osborn Delegation Strategies for ABAC FPS’2016 7 / 22

Recommend

Incorporating Off-Line Attribute Delegation into Hierarchical Group and Attribute-Based Access

Incorporating Off-Line Attribute Delegation into Hierarchical Group and Attribute-Based Access

Incorporating Off-Line Attribute Delegation into Hierarchical Group and Attribute-Based Access Control Daniel Servos Michael Bauer Western University Western University London, Ontario London, Ontario dservos5@uwo.ca bauer@uwo.ca November

511 views • 34 slides
DELEGATION readysetpresent.com Delegation Program Objectives ( 1 of 3 ) Understand the

DELEGATION readysetpresent.com Delegation Program Objectives ( 1 of 3 ) Understand the

DELEGATION readysetpresent.com Delegation Program Objectives ( 1 of 3 ) Understand the benefits of delegation. Define delegation, and identify its benefits and uses. Explain the basic methods involved in successful delegation. Explore the

1.79k views • 149 slides
Delegation in Role-Based Access Control Controlling delegation Enforcing transfer delegation

Delegation in Role-Based Access Control Controlling delegation Enforcing transfer delegation

Introduction Delegation operations in hierarchical RBAC Delegation in Role-Based Access Control Controlling delegation Enforcing transfer delegation Jason Crampton Hemanth Khambhammettu semantics Conclusion Information Security

959 views • 57 slides
Small Group Reading Instruction for ELs Incorporating Strategies into a Successful Routine Sarah

Small Group Reading Instruction for ELs Incorporating Strategies into a Successful Routine Sarah

Small Group Reading Instruction for ELs Incorporating Strategies into a Successful Routine Sarah Cherry - First Grade Teacher Angela Lee - Instructional Coach chersara@d91.k12.id.us leeange@d91.k12.id.us Welcome! What question do you

560 views • 16 slides
Incorporating IPMVP and Six Sigma Strategies into Monitoring and Evaluation Prepared for the

Incorporating IPMVP and Six Sigma Strategies into Monitoring and Evaluation Prepared for the

Incorporating IPMVP and Six Sigma Strategies into Monitoring and Evaluation Prepared for the 2007 ECEEE Summer Study Prepared by Kathleen Carlson, Robert J. Mowris, Ean Jones Robert Mowris & Associates Introduction Energy efficiency

603 views • 22 slides
Incorporating Harm Reduction Strategies in Behavioral Health Grantmaking October 25, 2017 1:00 p.m.

Incorporating Harm Reduction Strategies in Behavioral Health Grantmaking October 25, 2017 1:00 p.m.

Incorporating Harm Reduction Strategies in Behavioral Health Grantmaking October 25, 2017 1:00 p.m. Eastern Daniel Raymond , Harm Reduction Coalition Jamie Wood , Open Society Foundations Hol Holes in in the the Fa Fabric Overdose epidemic

371 views • 14 slides
Why attribute-based signatures? The kind of authentication required in an attribute-based system

Why attribute-based signatures? The kind of authentication required in an attribute-based system

Attribute-Based Signatures Hemanta K. Maji Manoj Prabhakaran Mike Rosulek November 22, 2010 Abstract We introduce Attribute-Based Signatures (ABS) , a versatile primitive that allows a party to sign a message with fine-grained

864 views • 35 slides
Dynamic Credentials and Ciphertext Delegation for ABE Amit Sahai, Hakan Seyalioglu, Brent Waters

Dynamic Credentials and Ciphertext Delegation for ABE Amit Sahai, Hakan Seyalioglu, Brent Waters

Dynamic Credentials and Ciphertext Delegation for ABE Amit Sahai, Hakan Seyalioglu, Brent Waters Attribute-Based Encryption [S-Waters 2005, GPSW06, BSW07] Different users will have credentials (attributes). Top Secret, Forensics 2

688 views • 66 slides
Lis Liste tenin ning: g: Hi Hitt tting ing th the T e Tar arge get Incorporating Active

Lis Liste tenin ning: g: Hi Hitt tting ing th the T e Tar arge get Incorporating Active

Lis Liste tenin ning: g: Hi Hitt tting ing th the T e Tar arge get Incorporating Active Learning Strategies to Teach Listening Skills to English Language Learners (ELLs) Veronica Pavon-Baker FL State and National CASAS Certified

896 views • 61 slides
INCORPORATING LARGE-SCALE CITIZEN INCORPORATING LARGE-SCALE CITIZEN DELIBERATION INTO

INCORPORATING LARGE-SCALE CITIZEN INCORPORATING LARGE-SCALE CITIZEN DELIBERATION INTO

INCORPORATING LARGE-SCALE CITIZEN INCORPORATING LARGE-SCALE CITIZEN DELIBERATION INTO ENVIRONMENTAL CONFLICT RESOLUTION America Speaks presentation to the 2008 ECR Conference Table Introductions Please form groups of 4-5 and give: Your name

848 views • 41 slides
1 Attribute Description Examples Operations Attribute Transformation Comments Type Level

1 Attribute Description Examples Operations Attribute Transformation Comments Type Level

586 views • 12 slides
Transforming a continuous attribute into a discrete (ordinal) attribute Ricco RAKOTOMALALA

Transforming a continuous attribute into a discrete (ordinal) attribute Ricco RAKOTOMALALA

Transforming a continuous attribute into a discrete (ordinal) attribute Ricco RAKOTOMALALA Universit Lumire Lyon 2 Ricco Rakotomalala 1 Tutoriels Tanagra - http://tutoriels-data-mining.blogspot.fr/ Outline 1. What is the discretization

398 views • 36 slides
Decorated Attribute Grammars Attribute Evaluation Meets Strategic Programming CC 2009, York, UK

Decorated Attribute Grammars Attribute Evaluation Meets Strategic Programming CC 2009, York, UK

Decorated Attribute Grammars Attribute Evaluation Meets Strategic Programming CC 2009, York, UK Lennart Kats , TU Delft ( me ) Tony Sloane, Macquarie Eelco Visser, TU Delft March 19, 2009 Software Engineering Research Group Context

314 views • 29 slides
Visual Attribute Learning: From STL to MTL VIPL 2017/08/30

Visual Attribute Learning: From STL to MTL VIPL 2017/08/30

Visual Attribute Learning: From STL to MTL VIPL 2017/08/30 hanhu@ict.ac.cn http: / / www.escience.cn/ people/ hhan/ index.html Outline Background Related work Attribute learning via STL

973 views • 61 slides
Attribute Grammars Wilhelm/Seidl/Hack: Compiler Design, Syntactic and Semantic Analysis

Attribute Grammars Wilhelm/Seidl/Hack: Compiler Design, Syntactic and Semantic Analysis

Attribute Grammars Attribute Grammars Wilhelm/Seidl/Hack: Compiler Design, Syntactic and Semantic Analysis Reinhard Wilhelm Universitt des Saarlandes wilhelm@cs.uni-saarland.de 5. November 2013 Attribute Grammars Attribute

369 views • 22 slides
Delegation: Delegation: Responsibilities of the Responsibilities of the Nurse Nurse Joyce

Delegation: Delegation: Responsibilities of the Responsibilities of the Nurse Nurse Joyce

Delegation: Delegation: Responsibilities of the Responsibilities of the Nurse Nurse Joyce Winstead, MSN, RN , FRE Mission Statement Mission Statement The mission of the North Carolina Board of Nursing is to protect the public by

388 views • 12 slides
Incorporating the Zebrafish Embryo Incorporating the Zebrafish Embryo Teratogenicity Assay Into

Incorporating the Zebrafish Embryo Incorporating the Zebrafish Embryo Teratogenicity Assay Into

Incorporating the Zebrafish Embryo Incorporating the Zebrafish Embryo Teratogenicity Assay Into the Drug Discovery Process Discovery Process Jedd Hillegass, Ph.D. Senior Toxicologist Lampire Biological Laboratories, Inc. Pipersville, PA, USA

497 views • 15 slides
Nurse Delegation Updates May 12 th 2020 Doris Barret RN Marlo Moss RN CONTRACT CHANGE DSHS MUST

Nurse Delegation Updates May 12 th 2020 Doris Barret RN Marlo Moss RN CONTRACT CHANGE DSHS MUST

Nurse Delegation Updates May 12 th 2020 Doris Barret RN Marlo Moss RN CONTRACT CHANGE DSHS MUST BE LISTED AS AN ADDITIONAL INSURED ON ALL NURSE DELEGATION CONTRACTS EMERGENCY RULES NURSE DELEGATION Nurse Delegation Emergency Rules 1. Basic

309 views • 6 slides
Delegation procedure: lack of transparency Delegation procedure: lack of transparency or European

Delegation procedure: lack of transparency Delegation procedure: lack of transparency or European

Brussels, 26th May 2015 Delegation procedure: lack of transparency Delegation procedure: lack of transparency or European democracy at risk? or European democracy at risk? Daniel Guguen Delineation between delegated and implementing acts?

61 views • 5 slides
DNS Session 4: Delegation and Reverse DNS Joe Abley AfNOG 2012, Serekunda,

DNS Session 4: Delegation and Reverse DNS Joe Abley AfNOG 2012, Serekunda,

DNS Session 4: Delegation and Reverse DNS Joe Abley AfNOG 2012, Serekunda, The Gambia Delegation How do you delegate a subdomain? In principle straightforward: just insert NS records for the sub-domain, pointing

456 views • 29 slides
Memory Delegation Kai-Min Chung Feng-Hao Liu . Cornell University

Memory Delegation Kai-Min Chung Feng-Hao Liu . Cornell University

Memory Delegation Kai-Min Chung Feng-Hao Liu . Cornell University Brown University . Yael Kalai Ran Raz. Microsoft Research Weizmann Inst. of Science . 1 Delegation

775 views • 22 slides
Proposal to add masking function to GFM Proposal part 1 Adding a masking reference attribute on

Proposal to add masking function to GFM Proposal part 1 Adding a masking reference attribute on

Proposal to add masking function to GFM Proposal part 1 Adding a masking reference attribute on the spatial attribute type. Proposal part 2 Details of the masking attribute addition. Table 3-13 - S100_GF_SpatialAttributeType Role Name

558 views • 8 slides
Delegation with Endogenous States Dino Gerardi Lucas Maestri Ignacio Monzn (Collegio Carlo

Delegation with Endogenous States Dino Gerardi Lucas Maestri Ignacio Monzn (Collegio Carlo

Delegation with Endogenous States Dino Gerardi Lucas Maestri Ignacio Monzn (Collegio Carlo Alberto) (FGV EPGE) (Collegio Carlo Alberto) University of Bonn - October 23rd, 2019 Introduction Delegation Delegation problems are

977 views • 39 slides
A solution for Access Delegation based on SAML Ciro Formisano Ermanno Travaglino Isabel

A solution for Access Delegation based on SAML Ciro Formisano Ermanno Travaglino Isabel

A solution for Access Delegation based on SAML Ciro Formisano Ermanno Travaglino Isabel Matranga Access Delegation in distributed environments SAML 2.0 Condition to Delegate Implementation Future plans Access Delegation in distributed

666 views • 18 slides

More recommend