Access Control for SAR Systems

Quirolgico, Stephen; Hu, Vincent; Karygiannis, Tom

doi:https://doi.org/10.6028/NIST.IR.7815

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

NIST IR 7815

Access Control for SAR Systems

Documentation Topics

Date Published: July 2011

Author(s)

Stephen Quirolgico (NIST), Vincent Hu (NIST), Tom Karygiannis (NIST)

Abstract

The Access Control for SAR Systems (ACSS) project focused on developing a prototype privilege management system used to express and enforce policies for controlling access to Suspicious Activity Report (SAR) data within the law enforcement domain. This report details the work conducted for the ACSS project including the design, implementation and integration of distributed software components for rendering policy decisions, storing subject and resource data, and facilitating web-based retrieval of SAR records.

Keywords

access control; law enforcement; policy; privilege management; SAR; Suspicious Activity Report; ABAC; XACML

Control Families

Access Control; System and Information Integrity

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7815
Download URL

Supplemental Material:
None available

Document History:
07/01/11: IR 7815 (Final)

Topics

Security and Privacy

access authorization, access control, security programs & operations