{"id":"https://openalex.org/W2294841296","doi":"https://doi.org/10.5220/0005548502930300","title":"Modeling Authorization Policies for Web Services in Presence of Transitive Dependencies","display_name":"Modeling Authorization Policies for Web Services in Presence of Transitive Dependencies","publication_year":2015,"publication_date":"2015-01-01","ids":{"openalex":"https://openalex.org/W2294841296","doi":"https://doi.org/10.5220/0005548502930300","mag":"2294841296"},"language":"en","primary_location":{"id":"doi:10.5220/0005548502930300","is_oa":false,"landing_page_url":"https://doi.org/10.5220/0005548502930300","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Security and Cryptography","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008984009","display_name":"Worachet Uttha","orcid":null},"institutions":[{"id":"https://openalex.org/I4210115196","display_name":"Laboratoire d\u2019Informatique Fondamentale de Marseille","ror":"https://ror.org/022my8t07","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I21491767","https://openalex.org/I4210115196","https://openalex.org/I4210142724","https://openalex.org/I4210159245"]},{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1294671590"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Worachet Uttha","raw_affiliation_strings":["LIF and CNRS UMR 7279 & AMU, France"],"affiliations":[{"raw_affiliation_string":"LIF and CNRS UMR 7279 & AMU, France","institution_ids":["https://openalex.org/I4210115196","https://openalex.org/I1294671590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015835455","display_name":"Clara Bertolissi","orcid":"https://orcid.org/0000-0001-9283-1386"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1294671590"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Clara Bertolissi","raw_affiliation_strings":["LIF, CNRS UMR 7279 & AMU and Fondazione Bruno Kessler, France"],"affiliations":[{"raw_affiliation_string":"LIF, CNRS UMR 7279 & AMU and Fondazione Bruno Kessler, France","institution_ids":["https://openalex.org/I1294671590"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047487115","display_name":"Silvio Ranise","orcid":"https://orcid.org/0000-0001-7269-9285"},"institutions":[{"id":"https://openalex.org/I2277624104","display_name":"Fondazione Bruno Kessler","ror":"https://ror.org/01j33xk10","country_code":"IT","type":"facility","lineage":["https://openalex.org/I2277624104"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Silvio Ranise","raw_affiliation_strings":["Fondazione Bruno Kessler, Italy"],"affiliations":[{"raw_affiliation_string":"Fondazione Bruno Kessler, Italy","institution_ids":["https://openalex.org/I2277624104"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5008984009"],"corresponding_institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210115196"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21465164,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"293","last_page":"300"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/xacml","display_name":"XACML","score":0.9301581382751465},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8491412401199341},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.7369949817657471},{"id":"https://openalex.org/keywords/datalog","display_name":"Datalog","score":0.667903482913971},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.5544396042823792},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.53514564037323},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49017152190208435},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.4743439257144928},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.45350268483161926},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.44635188579559326},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4276387691497803},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.417501300573349},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32332396507263184},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.31585031747817993}],"concepts":[{"id":"https://openalex.org/C2779886121","wikidata":"https://www.wikidata.org/wiki/Q288682","display_name":"XACML","level":3,"score":0.9301581382751465},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8491412401199341},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.7369949817657471},{"id":"https://openalex.org/C148230440","wikidata":"https://www.wikidata.org/wiki/Q1172264","display_name":"Datalog","level":2,"score":0.667903482913971},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.5544396042823792},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.53514564037323},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49017152190208435},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.4743439257144928},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.45350268483161926},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.44635188579559326},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4276387691497803},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.417501300573349},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32332396507263184},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.31585031747817993},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5220/0005548502930300","is_oa":false,"landing_page_url":"https://doi.org/10.5220/0005548502930300","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Security and Cryptography","raw_type":"proceedings-article"},{"id":"pmh:oai:iris.unitn.it:11572/333082","is_oa":false,"landing_page_url":"http://hdl.handle.net/11572/333082","pdf_url":null,"source":{"id":"https://openalex.org/S4306401913","display_name":"Institutional Research Information System (Universit\u00e0 degli Studi di Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.75}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1552659086","https://openalex.org/W1602828133","https://openalex.org/W1969965298","https://openalex.org/W2000492088","https://openalex.org/W2042685198","https://openalex.org/W2052397679","https://openalex.org/W2070598037","https://openalex.org/W2071489460","https://openalex.org/W2112618447","https://openalex.org/W2125696869","https://openalex.org/W2128076027","https://openalex.org/W2160207938","https://openalex.org/W2167685423","https://openalex.org/W2305032961"],"related_works":["https://openalex.org/W2612447197","https://openalex.org/W2371841920","https://openalex.org/W2392187120","https://openalex.org/W2571946640","https://openalex.org/W1920330819","https://openalex.org/W2149886529","https://openalex.org/W2375359387","https://openalex.org/W2591360249","https://openalex.org/W1982765810","https://openalex.org/W2055466670"],"abstract_inverted_index":{"Access":[0,79],"control":[1,25],"is":[2,28,123],"a":[3,42,48,69,74,84,109,149],"crucial":[4],"issue":[5],"for":[6,117,134],"the":[7,32,35,102,140,154],"security":[8],"of":[9,76,90,105,111,139],"Web":[10],"Services.":[11],"Since":[12],"these":[13],"are":[14],"independently":[15],"designed,":[16],"implemented,":[17],"and":[18],"managed,":[19],"each":[20],"with":[21],"its":[22],"own":[23],"access":[24,33],"policy,":[26],"it":[27],"challenging":[29],"to":[30,34,53,59,87,129],"mediate":[31],"information":[36],"they":[37],"share.":[38],"In":[39],"this":[40,65],"context,":[41],"particularly":[43],"difficult":[44],"case":[45,150],"occurs":[46],"when":[47],"service":[49,52],"invokes":[50],"another":[51],"satisfy":[54],"an":[55,113,131],"initial":[56],"request,":[57],"leading":[58],"indirect":[60],"authorization":[61,92],"errors.":[62],"To":[63,143],"overcome":[64],"problem,":[66],"we":[67,126,147],"propose":[68],"new":[70],"approach":[71],"based":[72],"on":[73,137],"version":[75],"ORganization":[77],"Based":[78],"Control":[80],"(OrBAC)":[81],"extended":[82],"by":[83],"delegation":[85],"graph":[86],"keep":[88],"track":[89],"transitive":[91],"dependencies.":[93],"We":[94],"show":[95,127],"that":[96],"Datalog":[97],"can":[98],"be":[99],"used":[100],"as":[101],"specification":[103],"language":[104],"our":[106,135,145],"model.":[107],"As":[108],"byproduct":[110],"this,":[112],"automated":[114],"analysis":[115],"technique":[116],"simulating":[118],"execution":[119],"scenarios":[120],"before":[121],"deployment":[122],"proposed.":[124],"Finally,":[125],"how":[128],"implement":[130],"enforcement":[132],"mechanism":[133],"model":[136],"top":[138],"XACML":[141],"architecture.":[142],"validate":[144],"approach,":[146],"present":[148],"study":[151],"adapted":[152],"from":[153],"literature.":[155]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}