RE: A paper about extending XACML to specify quantified riskadaptive access control

["Tolbert, John W" <john.w.tolbert@boeing.com>]

Background info on risk-adaptive access control:

http://csrc.nist.gov/news_events/privilege-management-workshop/PvM-Model-Survey-Aug26-2009.pdf

http://csrc.nist.gov/news_events/privilege-management-workshop/radac-Paper0001.pdf

---

From: wlhan [mailto:wlhan@fudan.edu.cn]
Sent: Friday, August 20, 2010 12:47 AM
To: xacml@lists.oasis-open.org
Cc: Tolbert, John W; 'Jianming Yong'; 'chenchen'
Subject: A paper about extending XACML to specify quantified risk adaptive access control

Hi all,

         I am an associate professor at Fudan University (http://homepage.fudan.edu.cn/~wlhan/). Our team recently published a paper at CSCWD 2010 (See http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=5471991).  John told my colleague Jianming that you could be interested in the topic and content discussed in our paper. Thus, I send it to you.

         If you have any suggest and problem, please feel free to tell me.

We are designing a reference implementation recently. Thus, any suggestion and question are welcomed.

 

Weili Han