使用应答集编程检测不完整性、不确定性和不可达性XACML策略
Detecting Incompleteness, Conflicting and Unreachability XACML Policies using Answer Set Programming
摘要：
XACML是近年来流行的一种访问控制策略语言，在许多应用中得到了广泛的应用。XACML中的策略是基于分布式资源上的许多组件构建的。由于XACML的表达能力，策略管理员很难理解他们编写的XACML策略的总体效果和后果。在本文中，我们展示了一种机制和工具，如何分析大的访问控制策略集，如（i）不完整的政策，（ii）冲突的政策，和（iii）无法访问的政策。为了检测这些问题，我们提出了一种方法，使用答案集编程（ASP）的上下文中XACML 3.0。
英文摘要：
Recently, XACML is a popular access control policy language that is used widely in many applications. Policies in XACML are built based on many components over distributed resources. Due to the expressiveness of XACML, it is not trivial for policy administrators to understand the overall effect and consequences of XACML policies they have written. In this paper we show a mechanism and a tool how to analyses big access control policies sets such as (i) incompleteness policies, (ii) conflicting policies, and (iii) unreachable policies. To detect these problems we present a method using Answer Set Programming (ASP) in the context of XACML 3.0.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
