Monitoring Framework for Access Control Configurations

摘要

This article presents a concept of structured analysis in continuous monitoring of access control in information systems. In analysis process, each possible and plausible configuration setting way is taking into account, in order to detect easy all misconfiguration settings and how they affect the risk value. In control process it can use access control policies, rules for each policy and condition in every rule. Every boolean condition is evaluated in a natural order, to take a correct decision. It shows a frame to relate configuration settings for to determine how to a misconfiguration setting influences other configuration settings.