Basit Shafiq, James Joshi, Elisa Bertino, and Arif Ghafoor

CERIAS TR 2003-24

techreport

Multi-domain application environments where distributed multiple organizations interoperate with each other are becoming a reality as can be seen in most Internet-based enterprise applications. Composition of a global security policy that governs information and resource accesses in such environments is a challenging problem. In this paper, we propose a policy integration mechanism that merges security policies of multiple collaborating domains into one unified global access control policy. This global policy ensures that security and autonomy of constituent domains are not compromised due to inter-domain information and resource sharing.

PDF

CERIAS

primary author's last name

School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN 47907

1900-01-01

Secure Interoperation Multi-domain Environment Role-Based Access Control Conflict resolution

Secure interoperation in a multi-domain environment