Negotiation of usage control policies - Simply the best?

Alexander Pretschner; Thomas Walter

doi:10.1109/ARES.2008.163

Negotiation of usage control policies - Simply the best?

Alexander Pretschner, Thomas Walter

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

9 Scopus citations

Abstract

The term "negotiation" suggests that multi-step bidirectional communication takes place. In this position paper, we play the devil's advocate and argue that (automated) policy negotiation essentially is one of the following, at least in the area of usage control. It can come down to a three-phase protocol that consists of a client request, a set of offers by the server, and the client's choice of an offer or to abort. Policy negotiation can also consist of a client request together with acceptable conditions plus the server's choice of one condition or to abort. In other words, negotiation of policies is a mere choice among alternatives; there is no negotiation in the intuitive sense of the word. - The goal of this position paper is to stimulate the discussion on what (automated) "policy negotiation" really is or can be.

Original language	English
Title of host publication	ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings
Pages	1135-1136
Number of pages	2
DOIs	https://doi.org/10.1109/ARES.2008.163
State	Published - 2008
Externally published	Yes
Event	3rd International Conference on Availability, Security, and Reliability, ARES 2008 - Barcelona, Spain Duration: 4 Mar 2008 → 7 Mar 2008

Publication series

Name	ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Conference

Conference	3rd International Conference on Availability, Security, and Reliability, ARES 2008
Country/Territory	Spain
City	Barcelona
Period	4/03/08 → 7/03/08

Access to Document

10.1109/ARES.2008.163

Cite this

@inproceedings{323358a9d9f14555a4ae95469dc6ee6f,

title = "Negotiation of usage control policies - Simply the best?",

abstract = "The term {"}negotiation{"} suggests that multi-step bidirectional communication takes place. In this position paper, we play the devil's advocate and argue that (automated) policy negotiation essentially is one of the following, at least in the area of usage control. It can come down to a three-phase protocol that consists of a client request, a set of offers by the server, and the client's choice of an offer or to abort. Policy negotiation can also consist of a client request together with acceptable conditions plus the server's choice of one condition or to abort. In other words, negotiation of policies is a mere choice among alternatives; there is no negotiation in the intuitive sense of the word. - The goal of this position paper is to stimulate the discussion on what (automated) {"}policy negotiation{"} really is or can be.",

author = "Alexander Pretschner and Thomas Walter",

year = "2008",

doi = "10.1109/ARES.2008.163",

language = "English",

isbn = "0769531024",

series = "ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings",

pages = "1135--1136",

booktitle = "ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings",

note = "3rd International Conference on Availability, Security, and Reliability, ARES 2008 ; Conference date: 04-03-2008 Through 07-03-2008",

}

Pretschner, A & Walter, T 2008, Negotiation of usage control policies - Simply the best? in ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings., 4529471, ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings, pp. 1135-1136, 3rd International Conference on Availability, Security, and Reliability, ARES 2008, Barcelona, Spain, 4/03/08. https://doi.org/10.1109/ARES.2008.163

Negotiation of usage control policies - Simply the best? / Pretschner, Alexander; Walter, Thomas.
ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings. 2008. p. 1135-1136 4529471 (ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review