@inproceedings{904eaea38d9644eeab08a1d287168f00,
title = "VRBAC: An extended RBAC model for virtualized environment and its conflict checking approach",
abstract = "This paper extends RBAC's authorizing ability via adding domain and virtual machine features aiming at applying in the virtu-alized scenarios. We define a new model named VRBAC in which authorized users can migrate or copy virtual machines from one domain to another without causing a conflict. Subjects can also share permissions of not only resources but also virtual machines with other subjects from the same or different domains. Three types of conflicts in VRBAC policies are discussed and described in form of description logic, which provides extra access to reasoning engines and facilitates the conflict checking procedure. Based on Active Directory and Xen Cloud Platform, VRBAC model visualization and its conflict checking can be enforced within the prototype system. The experimental results indicate that all conflicts can be effectively detected and the literal report generated can provide conflict details such as conflict types, positions and causes as guidance for further conflict resolution.",
keywords = "Description logic, Policy conflict, RBAC, Virtualization",
author = "Yang Luo and Yazhuo Li and Qing Tang and Zhao Wei and Chunhe Xia",
year = "2013",
doi = "10.1007/978-3-642-53959-6\_18",
language = "英语",
isbn = "9783642539589",
series = "Communications in Computer and Information Science",
publisher = "Springer Verlag",
pages = "194--205",
booktitle = "Frontiers in Internet Technologies - Second CCF Internet Conference of China, ICoC 2013, Revised Selected Papers",
address = "德国",
note = "2nd CCF Internet Conference of China, ICoC 2013 ; Conference date: 10-07-2013 Through 10-07-2013",
}