Link to the University of Pittsburgh Homepage
Link to the University Library System Homepage Link to the Contact Us Form

Towards quantitative analysis of proofs of authorization: Applications, framework, and techniques

Adam, JL and Ting, Y (2010) Towards quantitative analysis of proofs of authorization: Applications, framework, and techniques. In: UNSPECIFIED UNSPECIFIED, 139 - 153. ISBN 9780769540825

[img] Plain Text (licence)
Available under License : See the attached license file.

Download (1kB)


Although policy compliance testing is generally treated as a binary decision problem, the evidence gathered during the trust management process can actually be used to examine these outcomes within a more continuous space. In this paper, we develop a formal model that allows us to quantitatively reason about the outcomes of the policy enforcement process in both absolute (i.e., user to ideal case) and relative (i.e., user to user) terms. Within this framework, it becomes possible to quantify, e.g., the robustness of a user's proof of authorization to possible perturbations in the system, how close an unauthorized user is to satisfying a particular policy, and relative "top-k" style rankings of the best users to carry out a particular task. To this end, we explore several interesting classes of scoring functions for assessing the robustness of authorization decisions, and develop criteria under which these types of functions can be composed with one another. We further show that these types of functions can be extended to quantify how close unauthorized users are to satisfying policies, which can be a useful risk metric for decision making under unexpected circumstances. © 2010 IEEE.


Social Networking:
Share |


Item Type: Book Section
Status: Published
CreatorsEmailPitt UsernameORCID
Adam, JL
Ting, Y
Date: 11 October 2010
Date Type: Publication
Page Range: 139 - 153
DOI or Unique Handle: 10.1109/csf.2010.17
Schools and Programs: Dietrich School of Arts and Sciences > Computer Science
Refereed: Yes
ISBN: 9780769540825
Date Deposited: 27 Nov 2012 18:39
Last Modified: 15 Oct 2021 02:55


Monthly Views for the past 3 years

Plum Analytics

Actions (login required)

View Item View Item