An Ontological Framework for Reasoning about Relations between Complex Access Control Policies in Cloud Environments

Simeon Veloudis, Iraklis Paraskakis, Christos Petsos

2019

Abstract

By embracing the cloud computing paradigm enterprises are able to realise significant cost savings whilst boosting their agility and productivity. Yet, due mainly to security and privacy concerns, many enterprises are reluctant to migrate the storage and processing of their critical assets to the cloud. One way to alleviate these concerns, hence bolster the adoption of cloud computing, is to infuse suitable access control policies in cloud services. Nevertheless, the complexity inherent in such policies, stemming from the dynamic nature of cloud environments, calls for a framework capable of providing assurances with respect to the effectiveness of these policies. The work presented in this paper elaborates on such a framework. In particular, it proposes an approach for generically checking potential subsumption relations between access control policies that incorporate the contextual knowledge that characterises an access request and which needs to be taken into account for granting, or denying, the request. The proposed framework is expressed ontologically hence enabling automated reasoning, through semantic inferencing, about policy subsumption.

Paper Citation

in Harvard Style

Veloudis S., Paraskakis I. and Petsos C. (2019). An Ontological Framework for Reasoning about Relations between Complex Access Control Policies in Cloud Environments.In Proceedings of the 9th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER, ISBN 978-989-758-365-0, pages 355-362. DOI: 10.5220/0007720703550362

in Bibtex Style

@conference{closer19,
author={Simeon Veloudis and Iraklis Paraskakis and Christos Petsos},
title={An Ontological Framework for Reasoning about Relations between Complex Access Control Policies in Cloud Environments},
booktitle={Proceedings of the 9th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,},
year={2019},
pages={355-362},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007720703550362},
isbn={978-989-758-365-0},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 9th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,
TI - An Ontological Framework for Reasoning about Relations between Complex Access Control Policies in Cloud Environments
SN - 978-989-758-365-0
AU - Veloudis S.
AU - Paraskakis I.
AU - Petsos C.
PY - 2019
SP - 355
EP - 362
DO - 10.5220/0007720703550362