Formalisation and Implementation of the XACML Access Control Mechanism

We propose a formal account of XACML, an OASIS standard adhering to the Policy Based Access Control model for the specifica- tion and enforcement of access control policies. To clarify all ambiguous and intricate aspects of XACML, we provide it with a more manageable alternative syntax and with a solid semantic ground. This lays the basis for developing tools and methodologies which allow software engineers to easily and precisely regulate access to resources using policies. To demonstrate feasibility and effectiveness of our approach, we provide a software tool, supporting the specification and evaluation of policies and access requests, whose implementation fully relies on our formal development

Common Representation of Information Flows for Dynamic Coalitions

We propose a formal foundation for reasoning about access control policies within a Dynamic Coalition, defining an abstraction over existing access control models and providing mechanisms for translation of those models into information-flow domain. The abstracted information-flow domain model, called a Common Representation, can then be used for defining a way to control the evolution of Dynamic Coalitions with respect to information flow

Abstracting PROV provenance graphs:A validity-preserving approach

Data provenance is a structured form of metadata designed to record the activities and datasets involved in data production, as well as their dependency relationships. The PROV data model, released by the W3C in 2013, defines a schema and constraints that together provide a structural and semantic foundation for provenance. This enables the interoperable exchange of provenance between data producers and consumers. When the provenance content is sensitive and subject to disclosure restrictions, however, a way of hiding parts of the provenance in a principled way before communicating it to certain parties is required. In this paper we present a provenance abstraction operator that achieves this goal. It maps a graphical representation of a PROV document PG1 to a new abstract version PG2, ensuring that (i) PG2 is a valid PROV graph, and (ii) the dependencies that appear in PG2 are justified by those that appear in PG1. These two properties ensure that further abstraction of abstract PROV graphs is possible. A guiding principle of the work is that of minimum damage: the resultant graph is altered as little as possible, while ensuring that the two properties are maintained. The operator developed is implemented as part of a user tool, described in a separate paper, that lets owners of sensitive provenance information control the abstraction by specifying an abstraction policy.</p

A solar spectroscopic absolute abundance of argon from RESIK

Observations of He-like and H-like Ar (Ar XVII and Ar XVIII) lines at 3.949 Angstroms and 3.733 Angstroms respectively with the RESIK X-ray spectrometer on the CORONAS-F spacecraft, together with temperatures and emission measures from the two channels of GOES, have been analyzed to obtain the abundance of Ar in flare plasmas in the solar corona. The line fluxes per unit emission measure show a temperature dependence like that predicted from theory, and lead to spectroscopically determined values for the absolute Ar abundance, A(Ar) = 6.44 pm 0.07 (Ar XVII) and 6.49 pm 0.16 (Ar XVIII) which are in agreement to within uncertainties. The weighted mean is 6.45 pm 0.06, which is between two recent compilations of the solar Ar abundance and suggest that the photospheric and coronal abundances of Ar are very similar.Comment: 4 figure

Multi-model-based Access Control in Construction Projects

During the execution of large scale construction projects performed by Virtual Organizations (VO), relatively complex technical models have to be exchanged between the VO members. For linking the trade and transfer of these models, a so-called multi-model container format was developed. Considering the different skills and tasks of the involved partners, it is not necessary for them to know all the models in every technical detailing. Furthermore, the model size can lead to a delay in communication. In this paper an approach is presented for defining model cut-outs according to the current project context. Dynamic dependencies to the project context as well as static dependencies on the organizational structure are mapped in a context-sensitive rule. As a result, an approach for dynamic filtering of multi-models is obtained which ensures, together with a filtering service, that the involved VO members get a simplified view of complex multi-models as well as sufficient permissions depending on their tasks.Comment: In Proceedings FAVO 2011, arXiv:1204.579

The Solar Flare Iron Abundance

The abundance of iron is measured from emission line complexes at 6.65 keV (Fe line) and 8 keV (Fe/Ni line) in {\em RHESSI} X-ray spectra during solar flares. Spectra during long-duration flares with steady declines were selected, with an isothermal assumption and improved data analysis methods over previous work. Two spectral fitting models give comparable results, viz. an iron abundance that is lower than previous coronal values but higher than photospheric values. In the preferred method, the estimated Fe abundance is $A({\rm Fe}) = 7.91 \pm 0.10$ (on a logarithmic scale, with $A({\rm H}) = 12$), or $2.6 \pm 0.6$ times the photospheric Fe abundance. Our estimate is based on a detailed analysis of 1,898 spectra taken during 20 flares. No variation from flare to flare is indicated. This argues for a fractionation mechanism similar to quiet-Sun plasma. The new value of $A({\rm Fe})$ has important implications for radiation loss curves, which are estimated.Comment: Accepted by Astrophysical Journa

Sphinx measurements of the 2009 solar minimum x-ray emission

The SphinX X-ray spectrophotometer on the CORONAS-PHOTON spacecraft measured soft X-ray emission in the 1-15 keV energy range during the deep solar minimum of 2009 with a sensitivity much greater than GOES. Several intervals are identified when the X-ray flux was exceptionally low, and the flux and solar X-ray luminosity are estimated. Spectral fits to the emission at these times give temperatures of 1.7-1.9 MK and emission measures between 4 x 10^47 cm^-3 and 1.1 x 10^48 cm^-3. Comparing SphinX emission with that from the Hinode X-ray Telescope, we deduce that most of the emission is from general coronal structures rather than confined features like bright points. For one of 27 intervals of exceptionally low activity identified in the SphinX data, the Sun's X-ray luminosity in an energy range roughly extrapolated to that of ROSAT (0.1-2.4 keV) was less than most nearby K and M dwarfs.Comment: Astrophysical Journal, in press. 14 pp, 3 figure

The Solar Photospheric-to-Coronal Fe abundance from X-ray Fluorescence Lines

The ratio of the Fe abundance in the photosphere to that in coronal flare plasmas is determined by X-ray lines within the complex at 6.7~keV (1.9~\AA) emitted during flares. The line complex includes the He-like Fe (\fexxv) resonance line $w$ (6.70~keV) and Fe K$\alpha$ lines (6.39, 6.40~keV), the latter being primarily formed by the fluorescence of photospheric material by X-rays from the hot flare plasma. The ratio of the Fe K$\alpha$ lines to the \fexxv\ $w$ depends on the ratio of the photospheric-to-flare Fe abundance, heliocentric angle $\theta$ of the flare, and the temperature $T_e$ of the flaring plasma. Using high-resolution spectra from X-ray spectrometers on the {\em P78-1} and {\em Solar Maximum Mission} spacecraft, the Fe abundance in flares is estimated to be $1.6\pm 0.5$ and $2.0 \pm 0.3$ times the photospheric Fe abundance, the {\em P78-1} value being preferred as it is more directly determined. This enhancement is consistent with results from X-ray spectra from the {\em RHESSI} spacecraft, but is significantly less than a factor 4 as in previous work.Comment: Accepted for publication by MNRA

Highly Ionized Potassium Lines in Solar X-ray Spectra and the Abundance of Potassium

The abundance of potassium is derived from X-ray lines observed during flares by the RESIK instrument on the solar mission CORONAS-F between 3.53 A and 3.57 A. The lines include those emitted by He-like K and Li-like K dielectronic satellites, which have been synthesized using the CHIANTI atomic code and newly calculated atomic data. There is good agreement of observed and synthesized spectra, and the theoretical behavior of the spectra with varying temperature estimated from the ratio of the two GOES channels is correctly predicted. The observed fluxes of the He-like K resonance line per unit emission measure gives log A(K) = 5.86 (on a scale log A(H) = 12), with a total range of a factor 2.9. This is higher than photospheric abundance estimates by a factor 5.5, a slightly greater enhancement than for other elements with first ionization potential (FIP) less than about 10 eV. There is, then, the possibility that enrichment of low-FIP elements in coronal plasmas depends weakly on the value of the FIP which for K is extremely low (4.34 eV). Our work also suggests that fractionation of elements to form the FIP effect occurs in the low chromosphere rather than higher up, as in some models.Comment: 14 pages, 3 figure