The definition of a correct Access Control Policy is a fundamental step in the design of a secure information system. However, the complexity of modern systems makes critical the choice upon which model to use for such definition. This is becoming particularly true for Industrial Networked Systems, where a correct access control policy must cover all the different and ever evolving interactions between all of its heterogeneous sub-systems at different levels of the production process. In this paper, with the support of an example of a typical industrial system, we highlight the limitations of the well known and widely used Role Based Access Control policy model and we propose an alternative model, built on the ideas of the Attribute Based Access Control model, showing how it can be leveraged to easily define complex access control policies in Industrial Networked Systems. We provide also a preliminary analysis on the kind of conflicts or anomalies that such expressive model can introduce.


    Access

    Download


    Export, share and cite



    Title :

    Toward attribute-based access control policy in industrial networked systems



    Publication date :

    2018-01-01



    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Classification :

    DDC:    629



    Optimization of attribute-based access control policy with priority filtering

    Xu, Weize / Kong, Lei / Wang, Nan et al. | IEEE | 2022



    Introducing Attribute-Based Access Control to AUTOSAR

    Kim, Dae-Kyoo / Song, Eunjee / Yu, Huafeng | SAE Technical Papers | 2016


    INTEGRATION OF ATTRIBUTE-BASED ACCESS CONTROL INTO AUTOMOTIVE ARCHITECTURES

    Rumez, Marcel / Duda, Alexander / Gründer, Patrick et al. | British Library Conference Proceedings | 2019


    Integration of Attribute-based Access Control into Automotive Architectures

    Rumez, Marcel / Duda, Alexander / Grunder, Patrick et al. | IEEE | 2019