GAA-API Hompage | Documentation & Papers | Software Distribution | FAQ

GAA-API/TrustBuilder Implementation [for NDSS 2005]

• Wide-range of security mechanisms
• Multiple authorization models
• Heterogeneous and adaptive security policies
• Application defined access rights and conditions

GAA-API Features

• Fast integration
  The GAA-API uses developer-standard C language APIs to allow one to rapidly add the modules to current software.

• Extensibility and poratability
  The GAA-API is structured to support the addition of modules for new conditions and to enable the use of multiple existing authorization databases from current applications. While the current reference implementation has been tested under Linux and Solaris operating systems only, the API has been carefully designed to be easily ported on other platforms.

GAA-API makes use of

• A simple policy language called Extended Access Control Lists (EACL).
• Conditions associated with granted (or denied) access rights.
• Three-phase policy enforcement scheme to evaluate conditions.