Dynamic Management of Security Policies in PrivOrBAC

This article is a continuation of our previous work on identifying and developing tools and concepts to provide automatic management and derivation of security and privacy policies. In this document we are interested in the extension of the PrivOrBAC model in order to ensure a dynamic management of privacy-aware security policies. Our approach, based on smart contracts (SC) and the WS-Agreement Specification, allows automatic agents representing data providers and access requesters to enter into an access agreement that takes into consideration not only service level clauses but also security rules to protect the privacy of individuals. Our solution can be deployed in such a way that no human intervention is required to reach this type of agreement. This work shows how to use the WS-Agreement Specification to set up a process for negotiating, creating and monitoring Service Level Agreements (SLAs) in accordance with a predefined access control policy. This article concludes with a case study accompanied by a representative implementation of our solution.

@article{MOKHTARI2021,
  title     = {Dynamic Management of Security Policies in PrivOrBAC},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {12},
  number    = {6},
  year      = {2021},
  publisher = {The Science and Information Organization},
  author    = {Jihane EL MOKHTARI and Anas ABOU EL KALAM and Siham BENHADDOU and Jean-Philippe LEROY},
  doi       = {10.14569/IJACSA.2021.0120681},
  url       = {https://doi.org/10.14569/IJACSA.2021.0120681}
}