A Policy Engineering Framework for Federated Access Management | Using software engineering principles to simplify the design of access management policies that balance flexible security with seamless interoperation

Rafae Bhatti

ISBN 10: 363911101X / ISBN 13: 9783639111019

Published by VDM Verlag Dr. Müller, 2009

About this Item

A Policy Engineering Framework for Federated Access Management | Using software engineering principles to simplify the design of access management policies that balance flexible security with seamless interoperation | Rafae Bhatti | Taschenbuch | Englisch | VDM Verlag Dr. Müller | EAN 9783639111019 | Verantwortliche Person für die EU: preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, mail[at]preigu[dot]de | Anbieter: preigu.

Seller Inventory # 101657237

Bibliographic Details

• Title: A Policy Engineering Framework for Federated Access Management | Using software engineering principles to simplify the design of access management policies that balance flexible security with seamless interoperation
• Publisher: VDM Verlag Dr. Müller
• Publication Date: 2009
• Language: English
• ISBN 10: 363911101X
• ISBN 13: 9783639111019
• Binding: Taschenbuch
• Condition: Neu
• Seller catalogs:
  • Bücher

About this title

Synopsis

Federated systems are an emerging paradigm for information sharing and integration. Such systems require access management policies that not only protect user privacy and resource security but also allow scalable and seamless interoperation. Current solutions to distributed access control generally fail to simultaneously address both dimensions of the problem. This book describes the design of a policy engineering framework, called X-FEDERATE, for specification and enforcement of access management policies in federated systems. The framework has been designed from the perspectives of both security management and software engineering to not only allow specification of requirements for federated access management but also allow development of standardized policy definitions and constructs that facilitate policy deployment and enforcement in a federated system. The framework comprises of an access control language specification that is an extension of the well-accepted Role Based Access Control (RBAC) standard. The language extends RBAC to incorporate various essential features for federated access management.

About the Author

Rafae Bhatti received his PhD from Purdue University in 2006. His research focuses on information systems security and privacy. His doctoral work has been cited by the OASIS industry consortium involved in the development of security standards such as RBAC and SAML. He has been a postdoc at IBM Almaden Research Center and currently works at Oracle.