RE: A paper about extending XACML to specify quantified riskadaptive access control

Background info on risk-adaptive access 
control:

http://csrc.nist.gov/news_events/privilege-management-workshop/PvM-Model-Survey-Aug26-2009.pdf

http://csrc.nist.gov/news_events/privilege-management-workshop/radac-Paper0001.pdf

From: wlhan [mailto:] 

Sent: Friday, August 20, 2010 12:47 AM
To: 

Cc: Tolbert, John W; 'Jianming Yong'; 
'chenchen'
Subject: A paper about extending XACML to specify 
quantified risk adaptive access control

Hi all, 

         
I am an associate professor at Fudan University 
(http://homepage.fudan.edu.cn/~wlhan/). Our team recently published a paper at 
CSCWD 2010 (See http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=5471991). 
 John told my colleague Jianming that you could be interested in the topic 
and content discussed in our paper. Thus, I send it to 
you.

         
If you have any suggest and problem, please feel free to tell me. 

We are designing a 
reference implementation recently. Thus, any suggestion and question are 
welcomed.

 

Weili 
Han