Composition of Access Control Schemes via Co-Existence: Three Case-Studies
Abstract
We address a particular kind of composition of access control schemes which include both a model to encode authorizations, and an administrative model to encode the manner in which such authorizations can change. The kind of composition we address is co-existence: two schemes working side-by-side in the same system in protection of the same set of resources with the same principals who seek access. We observe that practice appears to be ahead of research in this regard, and discuss case-studies we have carried out of three real-world compositions. We then articulate takeaways from the case-studies.
Type
Publication
Proceedings of the 31st ACM Symposium on Access Control Models and Technologies
Authors
Indrani Ray
(she/her)
PhD student
Indrani Ray is a current PhD student at the University of Waterloo working on how people control access to their stuff.
Authors
Kami Vaniea
(she/her)
Associate Professor
I am an Associate Professor at the University of Waterloo’s Department of Electrical and Computer Engineering (ECE) where I head the Technology Usability Lab in Privacy and Security (TULiPS). The goal of my research is to make security and privacy technologies more accessible for a wide range of users including end users, developers, and system administrators. I believe that technology should support people in their activities. My recent projects include topics like patch management, developer-centered privacy, phishing, online anonymity, smart speaker privacy, and privacy on social media.