Backes, J;
Berrueco, U;
Bray, T;
Brim, D;
Cook, B;
Gacek, A;
Jhala, R;
... Viswanathan, D; + view all
(2020)
Stratified Abstraction of Access Control Policies.
In:
International Conference on Computer Aided Verification CAV 2020: Computer Aided Verification.
(pp. pp. 165-176).
Springer, Cham
Preview |
Text
Backes2020_Chapter_StratifiedAbstractionOfAccessC.pdf - Published Version Download (817kB) | Preview |
Abstract
The shift to cloud-based APIs has made application security critically depend on understanding and reasoning about policies that regulate access to cloud resources. We present stratified predicate abstraction, a new approach that summarizes complex security policies into a compact set of positive and declarative statements that precisely state who has access to a resource. We have implemented stratified abstraction and deployed it as the engine powering AWS’s IAM Access Analyzer service, and hence, demonstrate how formal methods and SMT can be used for security policy explanation.
| Type: | Proceedings paper |
|---|---|
| Title: | Stratified Abstraction of Access Control Policies |
| Event: | International Conference on Computer Aided Verification CAV 2020: |
| ISBN-13: | 9783030532871 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1007/978-3-030-53288-8_9 |
| Publisher version: | https://doi.org/10.1007/978-3-030-53288-8_9 |
| Language: | English |
| Additional information: | This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited. |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10108526 |
Archive Staff Only
 |
View Item |
