Policy administration domains

Research output: Chapter in Book/Report/Conference proceedingConference proceeding contributionpeer-review


We present a model for policy administration structures. The model consists of a mathematical notation that captures the relationship between policies and objects and the entities that manage policies for those objects. In the model a system is viewed as consisting of a number of policy administration domains. The domains are arranged in a hierarchy, representing descending levels of authority. The presence of an object in a domain represents the ability of the manager of that domain to write policy for that object. A number of important issues for policy administration are identified and addressed within the model. These include meta-policy questions, such as who has control over the placement of an object in a policy administration domain and where it can be moved within the hierarchy. A number of possible approaches to each of these questions is identified and expressed in the notation presented. The model is capable of expressing policy administration in DAC, MAC and combined systems.

Original languageEnglish
Title of host publicationInformation Security and Privacy
Subtitle of host publication7th Australasian Conference, ACISP 2002, Melbourne, Australia, July 3-5, 2002 Proceedings
Place of PublicationBerlin
PublisherSpringer, Springer Nature
Number of pages17
ISBN (Print)3540438610, 9783540438618
Publication statusPublished - 2002
Event7th Australasian Conference on Information Security and Privacy, ACISP 2002 - Melbourne, Australia
Duration: 3 Jul 20025 Jul 2002

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)03029743
ISSN (Electronic)16113349


Other7th Australasian Conference on Information Security and Privacy, ACISP 2002


Dive into the research topics of 'Policy administration domains'. Together they form a unique fingerprint.

Cite this