Automated Access Control Policy Testing System (A-ACPTS)

Award Information
Agency: Department of Commerce
Branch: National Institute of Standards and Technology
Contract: 70NANB16H192
Agency Tracking Number: 035.03.02 (2016)
Amount: $299,969.00
Phase: Phase II
Program: SBIR
Solicitation Topic Code: 9.03.02
Solicitation Number: N/A
Timeline
Solicitation Year: 2016
Award Year: 2016
Award Start Date (Proposal Award Date): 2016-08-01
Award End Date (Contract End Date): 2018-07-31
Small Business Information
1855 First Ave Ste 103, San Diego, CA, 92101-2650
DUNS: 828934914
HUBZone Owned: N
Woman Owned: N
Socially and Economically Disadvantaged: N
Principal Investigator
 Ulrich Lang
 (650) 515-3391
 ulrich.lang@objectsecurity.com
Business Contact
 Ulrich Lang
Phone: (650) 515-3391
Email: ulrich.lang@objectsecurity.com
Research Institution
N/A
Abstract
A-ACPTS Phase 2 transitions NIST Access Control Policy Tool (ACPT) R&D with innovative enhancements into commercialization, developing a commercially successful access control policy testing product that improves access control policy testing (minimizes error potential, faster, more usable, more efficient). A-ACPTS Phase 2 extends ACPT through a number of innovations that improve testing beyond the state of the art, including: (1) A-ACPTS supports the specification of testing properties and policies at a generic, intuitive “high level” of abstraction. With A-ACPTS, testing properties can be automatically verified against the policy even if they are authored using differing attributes. (2) A-ACPTS ingests, analyzes, merges, and normalizes information about the functional environment and flexibly relates access policy testing closer to the actual access control policy implementation on the functional environment. (3) A-ACPTS automatically ingests many information sources required for testing with semantic consistency, so that the policy testing becomes more automated, fast, easy, and correct. (4) A-ACPTS can automatically re-test when the ingested information changes, minimizing re-testing efforts. A-ACPTS has already been partly implemented during Phase 1, and will be rapidly developed towards commercial viability during Phase 2 as both a cloud service (SaaS) and an on-premises installed product based on the Eclipse/OpenPMF platform.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government