Managing access control complexity using metrices

  title={Managing access control complexity using metrices},
  author={Trent Jaeger},
General access control models enable flexible expression of access control policies, but they make the verification of whether a particular access control configuration is safe (i.e., prevents the leakage of a permission to an unauthorized subject) difficult. The current approach to expressing safety policy in such models is to use constraints. When the… CONTINUE READING