Improving Network Access Control Integrity Through Redundant Mechanisms

Distributed access control schemes sad usually use automatic access control configuration schemes. These methods rely on three criteria to improve the positioning of access control rules. In this paper we show that the alteration of one of these criteria can bring some redundancy in the access control configuration. This redundancy can be used to improve the trust a security officer can have in the access control process integrity. We demonstrate that the overhead generated by this redundancy is generally negligible when the underlying network is sufficiently big. Key-Word