Visualization for access control policy analysis results using multi-level grids

Prathima Rao*, Gabriel Ghinita, Elisa Bertino, Jorge Lobo

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

9 Citations (Scopus)

Abstract

The rapid increase in deployment of policy-based access control systems faces security administrators with the daunting task of managing a large number of complex access control policies. Several policy analysis types, (e.g., policy similarity, policy conflict and change-impact) have been proposed to help administrators maintain consistent and conflict-free policy repositories. However, there has not been much focus on the presentation and the ensuing interpretation of the results of such analyses, which greatly undermines the usability factor. In this paper, we present a novel multi-level grid-based technique for visualizing results of policy analysis. We implemented this technique, and we present a sample policy similarity analysis scenario that highlights the advantages of the proposed result visualization method.

Original languageEnglish
Title of host publicationProceedings - 2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009
Pages25-28
Number of pages4
DOIs
Publication statusPublished - 2009
Externally publishedYes
Event2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009 - London, United Kingdom
Duration: 20 Jul 200922 Jul 2009

Publication series

NameProceedings - 2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009

Conference

Conference2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009
Country/TerritoryUnited Kingdom
CityLondon
Period20/07/0922/07/09

Fingerprint

Dive into the research topics of 'Visualization for access control policy analysis results using multi-level grids'. Together they form a unique fingerprint.

Cite this