Presentations of the 1st PaaSword CS-IFG Workshop that took place on 10th of November 2016 in Athens, Greece

1. www.paasword.eu
Demo - Part B:
Context-aware Access Control
IFG
November 10th, 2016, Athens

2. Context
“Any information that can be used to characterize the situation of
an entity (person, place, or object) that is considered relevant to
the interaction between a user and an application, including the
user and applications themselves” (Abowd, et al., 1999; Dey, 2001)
PaaSword18/11/2016 2

3. Challenges
PaaSword18/11/2016 3
Access control models & Context
Discretionary Access Control (DAC)
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC)
Attribute Based Access Control (ABAC)
ABAC provides the appropriate flexibility that is highly desired
in the heterogeneous cloud computing domain
Context is of utmost importance in the inherently
heterogeneous and dynamic cloud environments

4. Context-aware Security Model
A model for semantically describing the knowledge that lurks
behind security policies
This model constitutes the background knowledge for code
annotations
It comprises of two dimensions related to
dynamic security controls
static security controls

5. ABAC Policy Model
PaaSword18/11/2016 10

6. Policy Design & Enforcement
Related Components
(Design-Time)
PaaSword18/11/2016 15

7. Policy Design & Enforcement
Related Components
(Run -Time)
PaaSword18/11/2016 16

8. Inferencing based on
Property Transitivity
Rule
If (Subject isLocatedIn SouthEurope)
Then Permit Access…
Facts
RequestorX isA Subject
RequestorX isLocatedIn Athens
Athens isLocatedIn Greece
Greece isLocatedIn SouthEurope
Inferred Fact
Inferred Facts
Athens isLocatedIn SouthEurope
RequestorX isLocatedIn Greece
RequestorX isLocatedIn SouthEurope
Decision
Access Request Permitted
PhysicalLocation
Area
isLocatedIn:Area
City
isLocatedIn:Area
North Europe
Central Europe
South Europe
Netherlands
isLocatedIn:North
Europe
Greece
isLocatedIn:South
Europe
Amsterdam
isLocatedIn:Netherlands
Athens
isLocatedIn:Greece
<<Instanceof>>
<<subclassof>>
Subject
isLocatedIn:PhysicalLocation
<<isLocatedIn>>

9. PaaSword18/11/2016 20
Questions?
Visit us:
www.paasword.euAcknowledgements:
This project has received funding from the
European Union’s Horizon 2020 research and
innovation programme under grant
agreement No 644814.