Break-Glass

1. Front Matter

   Pages i-xiii

   PDF

2. Introduction

   • Helmut Petritsch

   Pages 1-14

3. Background

   • Helmut Petritsch

   Pages 15-36

4. A Generic Break-Glass Model

   • Helmut Petritsch

   Pages 37-50

5. Policy Definition: Pre-Access

   • Helmut Petritsch

   Pages 51-91

6. User Information: At-Access

   • Helmut Petritsch

   Pages 93-105

7. Analysis: Post-Access

   • Helmut Petritsch

   Pages 107-124

8. Implementation

   • Helmut Petritsch

   Pages 125-135

9. Related Work

   • Helmut Petritsch

   Pages 137-163

10. Evaluation

    • Helmut Petritsch

    Pages 165-175

11. Discussion and Conclusion

    • Helmut Petritsch

    Pages 177-196

12. Back Matter

    Pages 197-220

    PDF

Helmut Petritsch describes the first holistic approach to Break-Glass which covers the whole life-cycle: from access control modeling (pre-access), to logging the security-relevant system state during Break-Glass accesses (at-access), and the automated analysis of Break-Glass accesses (post-access). Break-Glass allows users to override security restrictions in exceptional situations. While several Break-Glass models specific to given access control models have already been discussed in research (e.g., extending RBAC with Break-Glass), the author introduces a generic Break-Glass model. The presented model is generic both in the sense that it allows to model existing Break-Glass approaches and that it is independent of the underlying access control model.

• Automated Post-Access Analysis
• Break-Glass
• Dynamic Access Control
• Recording System State
• Security Override

• Strategic Customer Engagement, SAP AG, Walldorf, Germany

  Helmut Petritsch

Helmut Petritsch is currently working as developer of enterprise software at a German multinational company.

Policies and ethics