a policy validation framework for strongenterprisestrong authorization.pdfVIP

A Policy Validation Framework for Enterprise Authorization Specification Ramaswamy Chandramouli National Institute of Standards and Technology, Gaithersburg, MD, USA (mouli@) Abstract the state where the configuration does not violate enterprise access control/authorization policies. To verify The validation of enterprise authorization the safety of the configuration therefore requires that the specification fo r conf ormance to enterprise security policies be expressed using access control model entities pol icies requires an out-of-band framework in many and relations. In other words there should not be any situations since the enfo rcing access control mechanism policy violations by the instances of the model entities does not pr ovide this feature. In this paper we describe and model relations for the enterprise. A common one such framework. The framework uses XML to encode approach adopted to meet this requirement is to augment the enterprise authorization specification, XML Schema the access control model with expressions called to specif y the underlyi ng access control model (which in constraints. our case is the Role-based Access control Model (RBAC)) There are however many practical limitations in and Schematron language to encode the policy ensuring that the enterprise authorization specification is