Validating access control policies with Alloy

Waël Hassan 2, Luigi Logrippo 1,2, Mahdi Mankai 1

1 Département d’informatique et ingénierie, Université du Québec en Outaouais
2 School of Information Technology and Engineering, University of Ottawa

ABSTRACT.

We present two projects that are being developed in our research
group. The first is on inconsistency detection in XACML policies. The
second one develops a novel access control paradigm, called process-based
access control, and has inconsistency detection as part of its goal. The
model analyzer Alloy is being used in both projects.