Easy Expression of Authorisation Policies

授权策略轻松表达

• 批准号: EP/D052424/1
• 负责人: Martina Angela Sasse
• 金额: $ 11.75万
• 依托单位: University College London
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2006
• 资助国家: 英国
• 起止时间: 2006 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FD052424%2F1
• 关键词: Easy; Expression; Authorisation; Policies

The primary purpose of this 20 month long project is to allow Gridmanagers to be able to specify the authorisation policy for access totheir Grid computing resources through the use of controlled naturallanguage. The policy tool will parse the policy, interpret it, and store it in its own internal representation, using a model and ontologydeveloped at the start of the research. The policy tool will prompt themanager to clarify any unclear terms (e.g. what is Fred? Is it afilename or a username?), resolve any ambiguities, and once this hasbeen done will print the policy out in similar natural language, usingwording as near to the original input language as possible. This willallow the manager to see if the computer has fully understood hispolicy, but if not, the manager will need to edit his policy andresubmit it, until the computer's version is identical in meaning to his own. Finally, the tool will compile the policy into two existing XML authorization policy languages (XACML and PERMIS) so that the policy can be automatically fed into existing Grid authorization engines (policy decision points). In this way, we can be assured that the policy that is implemented is the one that the manager intended it to be.

这个20个月的项目的主要目的是允许GridManagers能够通过使用受控的Naturallangage来指定访问Totheir网格计算资源的授权策略。策略工具将使用模型和本体论在研究开始时使用模型和本体论来解释政策，解释并将其存储在其自身的内部表示中。该政策工具将促使Themanager澄清任何不清楚的术语（例如，弗雷德是什么？是afilename还是用户名？），解决任何歧义，一旦完成此类歧义，就可以用类似的自然语言将策略打印出来，并使用与原始输入语言接近的单词使用。这将使经理查看计算机是否完全了解了西班牙甲板，但是如果没有，经理将需要编辑其策略Andresubmit，直到计算机的版本与他自己的含义相同。最后，该工具将将策略编译成两种现有的XML授权策略语言（XACML和Permis），以便可以自动将策略送入现有的网格授权引擎（策略决策点）。这样，我们可以确保实施的政策是经理打算成为的政策。

项目成果

Guiding decisions on authorization policies

指导授权政策决策

• DOI: 10.1145/2245276.2232015
• 发表时间: 2012
• 作者: Bartsch S

How Users Bypass Access Control - And Why: The Impact Of Authorization Problems On Individuals And The Organization

用户如何绕过访问控制 - 以及原因：授权问题对个人和组织的影响

• 发表时间: 2013
• 期刊: European Conference on Information Systems (ECIS) 2013 Completed Research
• 作者: Bartsch S

The Virtuous Circle of Expressing Authorization

表达授权的良性循环

• 发表时间: 2006
• 作者: N/a Chadwick

Expressions of expertness

专业的表达

• DOI: 10.1145/1408664.1408675
• 发表时间: 2008
• 作者: Inglesant P

Dr. PERMIS, or: How I Learned to Stop Worrying and Love Access Control (submitted for review)

PERMIS 博士，或者：我如何学会停止担忧并热爱访问控制（已提交审核）

• 发表时间: 2008
• 作者: N/a Inglesant