自动认证授权策略阻力
Automated Certification of Authorisation Policy Resistance
摘要：
基于属性的访问控制（ABAC）扩展了传统的访问控制，将访问请求视为一组成对的属性名称-值，使其在开放和分布式系统的上下文中特别有用，其中安全相关信息可以从不同的源收集。但是，ABAC支持属性隐藏攻击，允许攻击者通过保留信息来获得某些访问权限。在本文中，我们首先介绍了属性隐藏攻击的政策阻力的概念。然后，我们提出的工具ATRAP（自动任期重写授权政策），最近正式的ABAC语言PTaCL，首先自动搜索阻力反例使用Maude，然后自动搜索伊莎贝尔证明阻力的基础上。我们用两个简单的政策例子来说明我们的方法，并提出了ATRAP性能的评估。
英文摘要：
Attribute-based Access Control (ABAC) extends traditional Access Control by considering an access request as a set of pairs attribute name-value, making it particularly useful in the context of open and distributed systems, where security relevant information can be collected from different sources. However, ABAC enables attribute hiding attacks, allowing an attacker to gain some access by withholding information. In this paper, we first introduce the notion of policy resistance to attribute hiding attacks. We then propose the tool ATRAP (Automatic Term Rewriting for Authorisation Policies), based on the recent formal ABAC language PTaCL, which first automatically searches for resistance counter-examples using Maude, and then automatically searches for an Isabelle proof of resistance. We illustrate our approach with two simple examples of policies and propose an evaluation of ATRAP performances.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
