Title of article :
A Model for Specification, Composition and Verification of Access Control Policies and Its Application toWeb Services
Author/Authors :
Derakhshandeh, Zahra Sheikhbahaee University - Department of Computer Engineering, ايران , Tork Ladani, Behrouz university of isfahan - Department of Computer Engineering, اصفهان, ايران
Abstract :
Despite significant advances in the access control domain, requirements of new computational environments like web services still raise new challenges. Lack of appropriate method for specification of access control policies (ACPs), composition, verication and analysis of them have all made the access control in the composition of web services a complicated problem. In this paper, a new independent formal model called Constrained Policy Graph (CPG) for specification of ACPs and their composition as well as verification of conict or incompatibility among the ACPs is represented. It is shown how CPG can be used in modeling and verification of web service composition ACPs. Also the application of CPG for modeling policies in BPEL processes -as the most common composition method for web services- is illustrated.
Keywords :
Access Control Policy (ACP) , Verification , Web Service Composition , BPEL , Constrained Policy Graph (CPG)
Journal title :
ISeCure - The ISC International Journal of Information Security
Journal title :
ISeCure - The ISC International Journal of Information Security
