UCL Discovery
UCL home » Library Services » Electronic resources » UCL Discovery

Stratified Abstraction of Access Control Policies

Backes, J; Berrueco, U; Bray, T; Brim, D; Cook, B; Gacek, A; Jhala, R; ... Viswanathan, D; + view all (2020) Stratified Abstraction of Access Control Policies. In: International Conference on Computer Aided Verification CAV 2020: Computer Aided Verification. (pp. pp. 165-176). Springer, Cham Green open access

[img]
Preview
Text
Backes2020_Chapter_StratifiedAbstractionOfAccessC.pdf - Published version

Download (817kB) | Preview

Abstract

The shift to cloud-based APIs has made application security critically depend on understanding and reasoning about policies that regulate access to cloud resources. We present stratified predicate abstraction, a new approach that summarizes complex security policies into a compact set of positive and declarative statements that precisely state who has access to a resource. We have implemented stratified abstraction and deployed it as the engine powering AWS’s IAM Access Analyzer service, and hence, demonstrate how formal methods and SMT can be used for security policy explanation.

Type: Proceedings paper
Title: Stratified Abstraction of Access Control Policies
Event: International Conference on Computer Aided Verification CAV 2020:
ISBN-13: 9783030532871
Open access status: An open access version is available from UCL Discovery
DOI: 10.1007/978-3-030-53288-8_9
Publisher version: https://doi.org/10.1007/978-3-030-53288-8_9
Language: English
Additional information: This is an open access article under the CC BY license (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
UCL classification: UCL
UCL > Provost and Vice Provost Offices
UCL > Provost and Vice Provost Offices > UCL BEAMS
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science
UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science
URI: https://discovery.ucl.ac.uk/id/eprint/10108526
Downloads since deposit
13Downloads
Download activity - last month
Download activity - last 12 months
Downloads by country - last 12 months

Archive Staff Only

View Item View Item