Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

12   Authorization

Overview

•   12.1 Access Control

•   12.1.1 Discretionary Access Control

•   12.1.2 Mandatory Access Control

•   12.1.3 Covert Channels

•   12.1.4 Identity-Based Access Control

•   12.1.5 Attribute-Based Access Control

•   12.2 Attribute Management

•   12.2.1 User Attributes and Privilege Assignment

•   12.2.2 Resource Attribute Assignment

•   12.2.3 Attribute Collection and Aggregation

•   12.2.4 Attribute Validation

•   12.2.5 Attribute Distribution

•   12.3 Digital Policy Management

•   12.3.1 Policy Specification

•   12.3.2 Policy Distribution

•   12.3.3 Policy Decision

•   12.3.4 Policy Enforcement

•   12.4 Authorization Adoption Schemas

•   12.4.1 Direct Integration

•   12.4.2 Indirect Integration

•   12.4.3 ...