Toward Visualizing Potential Policy Conflicts in eXtensible Access Control Markup Language (XACML)

The eXtensible Access Control Markup Language (XACML) is allowing enterprises to implement a standard way of access control to their resources. Security administrators no longer need to duplicate their efforts in writing multiple policies for different resources since a XACML policy can be applied to multiple resources. Companies such as IBM, Sun Microsystems, Oracle, and Cisco are already providing integration of XACML in their products. Although the introduction of XACML has provided enterprises with a better approach of commonly realizing access control, there are still inconsistencies that policy administrators need to be aware of. This thesis identifies some of the inconsistencies in XACML today and introduces a new tool that can be used to visualize some of those inconsistencies. This new tool could be used by a policy administrator to visualize possible conflicting data among a set of policies.

Name thesis:degree_name

M.S.

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Computer Science

Year

2009

Author dc:creator

• Rosa, William Domingo

Contributors dc:contributor

• Tu, Shengru
• DePano, N. Adlai A.
• Roussev, Vassil

• XACML
• OASIS
• XML
• DOM
• XPath
• Java
• Derby

Repository record dc:identifier

https://scholarworks.uno.edu/td/914

OAI identifier oai:identifier

oai:scholarworks.uno.edu:td-1895