工业网络化系统中访问策略实现的自动确定
Automated fixing of access policy implementation in Industrial Networked Systems
摘要：
访问控制（AC）是每个信息安全体系结构解决方案的核心。事实上，没有有效的保护方案可以从访问控制策略的精心设计中抽象出来，现代工业网络系统（INS）的基础设施也不例外。本文提出了一个全面的框架，INS访问控制。所提出的方法，使积极和消极的AC政策的描述，通过应用基于角色的访问控制（RBAC）的范例，典型的INS实现，同时考虑到不同层次的抽象。采用适当的技术来检查策略是否在系统中正确实现（验证）。当检测到冲突时，自动计算系统用户的可能的凭证（重新）分配，这可以用于纠正异常（冲突解决）。
英文摘要：
Access control (AC) is the core of every architectural solution for information security. Indeed, no effective protection scheme can abstract from the careful design of access control policies, and infrastructures underlying modern Industrial Networked Systems (INSs) are not exceptions from this point of view. This paper presents a comprehensive framework for INS access control. The proposed approach enables the description of both positive and negative AC policies, by applying the Role Based Access Control (RBAC) paradigm to typical INS implementations, while taking into account different levels of abstraction. Suitable techniques are adopted to check whether or not policies are correctly implemented in the system (verification). When conflicts are detected, possible (re)assignments of credentials to the system users are automatically computed, that can be adopted to correct anomalies (conflict resolution).
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
