You are here
Automated Access Control Policy Testing System (A-ACPTS)
Award Information
Agency: Department of Commerce
Branch: National Institute of Standards and Technology
Contract: 70NANB16H192
Agency Tracking Number: 035.03.02 (2016)
Amount:
$299,969.00
Phase:
Phase II
Program:
SBIR
Solicitation Topic Code:
9.03.02
Solicitation Number:
N/A
Timeline
Solicitation Year:
2016
Award Year:
2016
Award Start Date (Proposal Award Date):
2016-08-01
Award End Date (Contract End Date):
2018-07-31
Small Business Information
1855 First Ave Ste 103, San Diego, CA, 92101-2650
DUNS:
828934914
HUBZone Owned:
N
Woman Owned:
N
Socially and Economically Disadvantaged:
N
Principal Investigator
Name: Ulrich Lang
Phone: (650) 515-3391
Email: ulrich.lang@objectsecurity.com
Phone: (650) 515-3391
Email: ulrich.lang@objectsecurity.com
Business Contact
Name: Ulrich Lang
Phone: (650) 515-3391
Email: ulrich.lang@objectsecurity.com
Phone: (650) 515-3391
Email: ulrich.lang@objectsecurity.com
Research Institution
N/A
Abstract
A-ACPTS Phase 2 transitions NIST Access Control Policy Tool (ACPT) R&D with innovative enhancements into commercialization, developing a commercially successful access control policy testing product that improves access control policy testing (minimizes error potential, faster, more usable, more efficient). A-ACPTS Phase 2 extends ACPT through a number of innovations that improve testing beyond the state of the art, including: (1) A-ACPTS supports the specification of testing properties and policies at a generic, intuitive “high level” of abstraction. With A-ACPTS, testing properties can be automatically verified against the policy even if they are authored using differing attributes. (2) A-ACPTS ingests, analyzes, merges, and normalizes information about the functional environment and flexibly relates access policy testing closer to the actual access control policy implementation on the functional environment. (3) A-ACPTS automatically ingests many information sources required for testing with semantic consistency, so that the policy testing becomes more automated, fast, easy, and correct. (4) A-ACPTS can automatically re-test when the ingested information changes, minimizing re-testing efforts. A-ACPTS has already been partly implemented during Phase 1, and will be rapidly developed towards commercial viability during Phase 2 as both a cloud service (SaaS) and an on-premises installed product based on the Eclipse/OpenPMF platform. * Information listed above is at the time of submission. *