An approach to secure information flow on object oriented role-based access control model

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2003, Pages 302-306

  Yang, Cungang ^a   Zhang, Chang N ^a  

^a UNIVERSITY OF REGINA   (Canada)

Author keywords

Confinement Problem; Information Flow Analysis; MAC; Message Filtering Algorithm; Object Oriented Role based Access Control Model (ORBAC)

Indexed keywords

ALGORITHMS; INFORMATION ANALYSIS; PROBLEM SOLVING;

ROLE-BASED ACCESS CONTROL (RBAC);

SECURITY OF DATA;

EID: 0037661197     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/952532.952594     Document Type: Conference Paper

References (13)

1. D. Ferraiolo, J. Cugini and D. R. Kulin, "Role Based Access Control: Features and motivation." In annual computer security applications conference, IEEE Computer Society Press, 1995.
2. R. Sandhu, E. J. Coyne, and C. E. Youman, Proceedings of the First ACM Workshop on Role Based Access Control. ACM, 1996.
3. Sylvia Osborn, "Mandatory Access Control and Role-Based Access Control Revisited", Proceedings of the second ACM workshop on Role-based access control, 1997, pp 31-40.
4. S.Osbom, R. Sandhu and Munawer, "Configuring Role-based Access Control to enforce Mandatory and discretionary Access Control policies." ACM Transaction on Information and System Security, Vol 3, no. 2, 2000, pp85-106.
5. R. Sandhu, "Role Hierarchies and Constraints for Lattice based access control". In computer Security-ESORICS 96, Springer Verlag, 1996, Lecture Notes 1146, pp65-79.
6. Chang. N. Zhang and Cungang Yang, "Specification and Enforcement of Object-oriented RBAC Model", 2001 IEEE Canadian Conference on Electrical and Computer Engineering, Toronto, May 2001, pp 128-135.
7. Chang. N. Zhang and Cungang Yang, "An Object-oriented RBAC Model for Distributed Systems", 2001 IEEE/IFIP Conference on software architecture, WICSA 2001, Netherland, August 2001, pp24-32.
8. Chang. N. Zhang and Cungang Yang, "Designing of a Complete Model of Object Oriented Role-based Access Control System for Distributed Networks", Journal of Information Science and Engineering (JISE), accepted and will be published in Nov. 2002.
9. D. E. Denning, "A lattice Model of Secure information flow." Communication of the ACM, 19(5), May 1976, pp236-243.
10. D. E. Denning and P. J. Denning, "Certification of programs for secure information flow." Communication of ACM, 20(7), Uly, 1977, pp504-513.
11. Potter, F. and Conchon, "Information flow in inference for free," ICFPOO, ACM, 2000, pp46-57.
12. Smith, G., "A new type system for secure information flow", In Proc. 14th IEEE Computer Security Foundations Workshop, Cape Breton, Nova Scotia, June 2001. IEEE, 2001, pp115-125.
13. Jajodia, S. and Kogan B. "Integrating an object-oriented data model with multilevel security," Proc. IEEE Symp. on Sucurity and Privacy, Oakland, CA, May 1990.