{"id":"https://openalex.org/W1976080814","doi":"https://doi.org/10.1145/2660267.2660307","title":"Fail-Secure Access Control","display_name":"Fail-Secure Access Control","publication_year":2014,"publication_date":"2014-11-03","ids":{"openalex":"https://openalex.org/W1976080814","doi":"https://doi.org/10.1145/2660267.2660307","mag":"1976080814"},"language":"en","primary_location":{"id":"doi:10.1145/2660267.2660307","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2660307","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073801126","display_name":"Petar Tsankov","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Petar Tsankov","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109968774","display_name":"Srdjan Marinovic","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Srdjan Marinovic","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112807617","display_name":"Mohammad Torabi Dashti","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mohammad Torabi Dashti","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025344654","display_name":"David Basin","orcid":"https://orcid.org/0000-0003-2952-939X"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"David Basin","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1157","last_page":"1168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/xacml","display_name":"XACML","score":0.7878932952880859},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7500406503677368},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.709090530872345},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.6230494379997253},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6161051988601685},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.5296696424484253},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.44835975766181946},{"id":"https://openalex.org/keywords/unintended-consequences","display_name":"Unintended consequences","score":0.44834113121032715},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.34427422285079956},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.22073295712471008}],"concepts":[{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.7878932952880859},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7500406503677368},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.709090530872345},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.6230494379997253},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6161051988601685},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.5296696424484253},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.44835975766181946},{"id":"https://openalex.org/C2776889888","wikidata":"https://www.wikidata.org/wiki/Q1135789","display_name":"Unintended consequences","level":2,"score":0.44834113121032715},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34427422285079956},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.22073295712471008},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2660267.2660307","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2660307","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8500000238418579}],"awards":[],"funders":[{"id":"https://openalex.org/F4320330165","display_name":"Serbian Academy of Sciences and Arts","ror":"https://ror.org/05m1y4204"},{"id":"https://openalex.org/F4320336702","display_name":"Zurich Information Security and Privacy Center","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W79503960","https://openalex.org/W114559391","https://openalex.org/W171601550","https://openalex.org/W1481826112","https://openalex.org/W1487409515","https://openalex.org/W1524995262","https://openalex.org/W1531064568","https://openalex.org/W1599739130","https://openalex.org/W1749560176","https://openalex.org/W1856491113","https://openalex.org/W1958859150","https://openalex.org/W2025316954","https://openalex.org/W2055028557","https://openalex.org/W2065076704","https://openalex.org/W2113443649","https://openalex.org/W2123479684","https://openalex.org/W2129340874","https://openalex.org/W2131775133","https://openalex.org/W2134907142","https://openalex.org/W2140730933","https://openalex.org/W2141673583","https://openalex.org/W2142760259","https://openalex.org/W2146356111","https://openalex.org/W2167122335","https://openalex.org/W2169348910","https://openalex.org/W2170496240","https://openalex.org/W2225968592","https://openalex.org/W3004444062","https://openalex.org/W4254216947","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2351416088","https://openalex.org/W2349247816","https://openalex.org/W2198182223","https://openalex.org/W2114574764","https://openalex.org/W1993102289","https://openalex.org/W130718849","https://openalex.org/W2120588644","https://openalex.org/W2896439152","https://openalex.org/W2981186629","https://openalex.org/W2121163399"],"abstract_inverted_index":{"Decentralized":[0],"and":[1,10,20,75,79,112],"distributed":[2],"access":[3,16,90],"control":[4,91],"systems":[5,52,92],"are":[6],"subject":[7],"to":[8,47],"communication":[9],"component":[11],"failures.":[12,95],"These":[13],"can":[14,68],"affect":[15],"decisions":[17],"in":[18,24,37,64,107],"surprising":[19],"unintended":[21],"ways,":[22],"resulting":[23],"insecure":[25],"systems.":[26],"Existing":[27],"analysis":[28],"frameworks":[29],"however":[30],"ignore":[31],"the":[32,66,102,108],"influence":[33],"of":[34,104],"failure":[35,105],"handling":[36,106],"decision":[38],"making.":[39],"Thus,":[40],"it":[41],"is":[42],"currently":[43],"all":[44],"but":[45],"impossible":[46],"derive":[48],"security":[49,116],"guarantees":[50],"for":[51,83],"that":[53],"may":[54],"fail.":[55],"To":[56,96],"address":[57],"this,":[58],"we":[59,100],"present":[60],"(1)":[61],"a":[62,77],"model":[63],"which":[65,87],"attacker":[67],"explicitly":[69],"induce":[70],"failures,":[71],"(2)":[72],"failure-handling":[73],"idioms,":[74],"(3)":[76],"method":[78],"an":[80],"associated":[81],"tool":[82],"verifying":[84],"fail-security":[85],"requirements,":[86],"describe":[88],"how":[89],"should":[93],"handle":[94],"illustrate":[97],"these":[98],"contributions,":[99],"analyze":[101],"consequences":[103],"XACML":[109],"3":[110],"standard":[111],"other":[113],"domains,":[114],"revealing":[115],"flaws.":[117]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}