The definition of a correct Access Control Policy is a fundamental step in the design of a secure information system. However, the complexity of modern systems makes critical the choice upon which model to use for such definition. This is becoming particularly true for Industrial Networked Systems, where a correct access control policy must cover all the different and ever evolving interactions between all of its heterogeneous sub-systems at different levels of the production process. In this paper, with the support of an example of a typical industrial system, we highlight the limitations of the well known and widely used Role Based Access Control policy model and we propose an alternative model, built on the ideas of the Attribute Based Access Control model, showing how it can be leveraged to easily define complex access control policies in Industrial Networked Systems. We provide also a preliminary analysis on the kind of conflicts or anomalies that such expressive model can introduce.


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    Toward attribute-based access control policy in industrial networked systems



    Erscheinungsdatum :

    01.01.2018



    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Klassifikation :

    DDC:    629



    Optimization of attribute-based access control policy with priority filtering

    Xu, Weize / Kong, Lei / Wang, Nan et al. | IEEE | 2022


    Introducing Attribute-Based Access Control to AUTOSAR

    Kim, Dae-Kyoo / Song, Eunjee / Yu, Huafeng | SAE Technical Papers | 2016


    Introducing Attribute-Based Access Control to AUTOSAR

    Kim, Dae-Kyoo / Song, Eunjee / Yu, Huafeng | British Library Conference Proceedings | 2016


    Integration of Attribute-based Access Control into Automotive Architectures

    Rumez, Marcel / Duda, Alexander / Grunder, Patrick et al. | IEEE | 2019