Maximal Consistent Security Policies

摘要

Information system security is an important task in many domains. Hence, it becomes essential to define users security needs (security properties) and security rules (security policy) to be enforced to achieve the security properties. The joint handling of security properties raises the problem of potential conflicts. This paper deals with an access control system, called OrBAC (organization-based access control). More precisely, we propose a strategy for conflict resolution in the OrBAC system, modeled by prioritized first-order knowledge bases