Group Centric Information Sharing Using Hierarchical Models
Abstract
Traditional security policies are often based on the concept of "need to know" and are typified by predefined and often rigid specifications of which principals and roles are pre-authorized to access the information. A recommendations of the 9/11 commission was to find ways to move from this traditional perspective toward one that emphasizes the "need to share". Ravi Sandhu and his colleagues have developed the Group centric secure information sharing model (gSIS) as a new model that is more adaptable to highly dynamic situations requiring information sharing. We present an implementation of gSIS and demonstrate its usefulness to use-cases in information sharing in social media. Our contributions include the prototype implementation extension to the model such as hierarchical groups and necessary and sufficient conditions, and the use of the Semantic Web language for representing the central gSIS concepts and associated data. Our framework uses a pragmatic approach of using semantic web technology to represent and reason about the hierarchy and procedural method to compute access decisions relying on the gSIS semantics.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jan 01, 2011
- Accession Number
- ADA550666
Entities
People
- Amit Mahale
Organizations
- University of Maryland, Baltimore County