article · 2022 IEEE 5th International Conference on Electronics Technology (ICET) · 2022
Implement Security Analysis of Access Control Policy Based on Constraint by SMT
Aodi Liu, Xuehui Du, Na Wang, Xiaochang C. Wang, Xiangyu Wu, Jiashun Zhou
Cited by 3Abstract and details only
Abstract
Access control is a widely used technology to protect information security. The implementation of access control depends on the response generated by access control policies to users’ access requests. Therefore, ensuring the correctness of access control policies is an important step to ensure the smooth implementation of access control mechanisms. To solve this problem, this paper proposes a constraint based access control policy security analysis framework (CACPSAF) to perform security analysis on access control policies. The framework transforms the problem of security analysis of access control policy into the satisfiability of security principle constraints. The analysis and calculation of access control policy can be divided into formal transformation of access control policy, SMT coding of policy model, generation of security principle constraints, policy detection and evaluation. The security analysis of policies is divided into mandatory security principle constraints, optional security principle constraints and user-defined security principle constraints. The multi-dimensional security analysis of access control policies is realized and the semantic expression of policy analysis is stronger. Finally, the effectiveness of this framework is analyzed by performance evaluation, which proves that this framework can provide strong support for fine-grained security analysis of policies, and help to correctly model and conFigure policies during policy modeling, implementation and verification.
Cite this paper
Liu, A., Du, X., Wang, N., Wang, X. C., Wu, X., & Zhou, J. (2022). Implement Security Analysis of Access Control Policy Based on Constraint by SMT. 2022 IEEE 5th International Conference on Electronics Technology (ICET), 40, 1043–1049. https://doi.org/10.1109/icet55676.2022.9824517
Liu, Aodi, et al. “Implement Security Analysis of Access Control Policy Based on Constraint by SMT.” 2022 IEEE 5th International Conference on Electronics Technology (ICET), vol. 40, 2022, pp. 1043–49, https://doi.org/10.1109/icet55676.2022.9824517.
Liu, Aodi, Xuehui Du, Na Wang, Xiaochang C. Wang, Xiangyu Wu, and Jiashun Zhou. 2022. “Implement Security Analysis of Access Control Policy Based on Constraint by SMT.” 2022 IEEE 5th International Conference on Electronics Technology (ICET) 40: 1043–49. https://doi.org/10.1109/icet55676.2022.9824517.
Liu, A. et al. (2022) ‘Implement Security Analysis of Access Control Policy Based on Constraint by SMT’, 2022 IEEE 5th International Conference on Electronics Technology (ICET), 40, pp. 1043–1049. Available at: https://doi.org/10.1109/icet55676.2022.9824517.
@article{liu2022implement,
title = {{Implement Security Analysis of Access Control Policy Based on Constraint by SMT}},
author = {Liu, Aodi and Du, Xuehui and Wang, Na and Wang, Xiaochang C. and Wu, Xiangyu and Zhou, Jiashun},
journal = {2022 IEEE 5th International Conference on Electronics Technology (ICET)},
volume = {40},
pages = {1043--1049},
year = {2022},
doi = {10.1109/icet55676.2022.9824517}
}Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.