Integrating object oriented role-based access control model with mandatory access control principles

Journal of Computer Information Systems

Volumn 43, Issue 3, 2003, Pages 40-49

  Zhang, Chang N ^a   Yang, Cungang ^a  

^a UNIVERSITY OF REGINA   (Canada)

Author keywords

Confinement Problem; DAC; Information Flow Analysis; MAC; Message Filtering Algorithm; Object Oriented Role based Access Control Model (ORBAC); RBAC

Indexed keywords

ROLE BASED ACCESS CONTROL (RBAC);

ALGORITHMS; MATHEMATICAL MODELS; PROBLEM SOLVING; SET THEORY;

INFORMATION ANALYSIS;

EID: 0037903723     PISSN: 08874417     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (21)

1. Lampson, B.W. "A Note on the Confinement Problem," Communications of ACM, 16:10, 1973, pp. 613-615.
2. Denning, D.E. and P.J. Denning. "Certification of Programs for Secure Information Flow," Communications of ACM, 20:7, July 1977, pp. 504-513.
3. Jajodia, S. and B. Kogan. "Integrating an Object-oriented Data Model with Multilevel Security." In Proc. 1990 Symposium on Research in Security & Privacy, IEEE Computer Society Press, May 1990, pp. 76-85.
4. Ferraiolo, D., J. Cugini, and D.R. Kulin. "Role Based Access Control: Features and Motivation." In Annual Computer Security Applications Conference, IEEE Computer Society Press, 1995.
5. Sandhu, R., E.J. Coyne, and C.E. Youman, (Eds.). Proceedings of the First ACM Workshop on Role Based Access Control. ACM, 1996.
6. Sandu, R., E.J. Coyne, H.L. Feinstem, and C.E. Youman. "Role-based Access Control Models," IEEE Computer, 29:2, February 1996, pp. 38-47.
7. Sandhu, R. and V. Bhamidipati. "The ARBAC97 Model for Role-based Administration of Roles: Preliminary Description and Outline," Second ACM Workshop on Role-based Access Control, Fairfax, Virginia, November 1997, pp. 41-54.
8. Jaeger, T. and Federquegiraud. "A Role-based Access Control Model for Protection Domain Derivation and Management," Second ACM Workshop on Role-based Access Control, Fairfax, Virginia, November 1997, pp. 95-108.
9. Zhang, C.N. and C. Yang. "Specification and Enforcement of Object-oriented RBAC Model," 2001 IEEE Canadian Conference on Electrical and Computer Engineering, Toronto, May 2001, pp. 128-135.
10. Zhang, C.N. and C. Yang. "An Object-oriented RBAC Model for Distributed Systems," 2001 IEEE/IFIP Conference on Software Architecture, WICSA 2001, The Netherlands, August 2001, pp. 24-32.
11. Osbom, S. "Mandatory Access Control and Role-based Access Control Revisited," Proceedings of the Second ACM Workshop on Role-based Access Control, 1997, pp. 31-40.
12. Osborn, S., R. Sandhu and Munawer. "Configuring Role-based Access Control to Enforce Mandatory and Discretionary Access Control Policies," ACM Transaction on Information and System Security, 3:2, 2000, pp. 85-106.
13. Sandhu, R. "Role Hierarchies and Constraints for Lattice-based Access Control," Computer Security-ESORICS, 96. Springer-Verlag, 1996, Lecture Notes 1146, pp. 65-79.
14. Nyanchama, M. and S.L. Osborn. "Modeling Mandatory Access Control in Role Based Security Systems." In Spooner, D., S. Demurjian, and J. Dobson (Eds.). Proceedings of the IFIP WG 11.3 Ninth Annual Working Conference on Database Security. Chapman & Hall, 1996, pp. 129-144.
15. United Modeling Language. UML Resource Center, http:// www.rational.com.
16. Zhang, C.N. and C. Yang. "Designing of a Complete Model of Object-oriented Role-based Access Control System for Distributed Networks," Journal of Information Science and Engineering (JISE), accepted and will be published in September 2002.
17. Denning, D.E. "A Lattice Model of Secure Information Flow," Communication of the ACM, 19:5, May 1976, pp. 236-243.
18. Potter, F. and S. Conchon. "Information Flow in Inference for Free," ICFP00, ACM, 2000, pp. 45-57.
19. Smith, G. "A New Type System for Secure Information Flow," Proc. 14th IEEE Computer Security Foundations Workshop, Cape Breton, Nova Scotia, June 2001, IEEE, 2001, pp. 115-125.
20. Bell, D.E. and L.J. Lapadula. Secure Computer Systems: Mathematical Foundations and Model. Bellford, MA: Mitre Corp., 1975.
21. Jajodia, S. and B. Kogan. "Integrating an Object-oriented Data Model with Multilevel Security," Proc. IEEE Symp. On Security and Privacy, Oakland, CA, May 1990.