A Meta-model of Access Control in a Fibred Security Language

摘要

The issue of representing access control requirements continues to demandsignificant attention. The focus of researchers has traditionally been on developing partic-ular access control models and policy specification languages for particular applications.However, this approach has resulted in an unnecessary surfeit of models and languages.In contrast, we describe a general access control model and a logic-based specificationlanguage from which both existing and novel access control models may be derived asparticular cases and from which several approaches can be developed for domain-specificapplications. We will argue that our general framework has a number of specific attrac-tions and an implication of our work is to encourage a methodological shift from a studyof the particulars of access control to its generalities.