Manageable access control for CORBA

Issue title: Special Issue on ESORICS 2000

Article type: Research Article

Authors: Brose, Gerald

Affiliations: Xtradyne Technologies AG, D–10119 Berlin, Germany. E-mail: gerald.brose@acm.org

Abstract: Specifying and managing access rights in large distributed systems is a non-trivial task. This paper presents a language-based approach to policy-based management of access rights. We develop an object-oriented access model and a concrete syntax that is designed to allow both flexible and manageable access control policies for CORBA objects. We introduce a typed construct for access rights called view that allows static type checking of specifications and show how a realistic example policy is expressed using this notation.

Keywords: Access control, policy languages, management, CORBA

DOI: 10.3233/JCS-2002-10402

Journal: Journal of Computer Security, vol. 10, no. 4, pp. 301-337, 2002