On modeling system-centric information for role engineering

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2003, Pages 169-178

  Shin, Dongwan ^a   Ahn, Gail Joon ^a   Cho, Sangrae ^b   Jin, Seunghun ^b  

^a University of North Carolina at Charlotte   (United States)

^b Electronics and Telecommunications Research Institute (ETRI)   (South Korea)

Author keywords

Attributive permissions; Information flow; Information model; Role engineering; Role based access control

Indexed keywords

COMPUTER SIMULATION; COMPUTER SIMULATION LANGUAGES; DATA ACQUISITION; DATA FLOW ANALYSIS; DATA REDUCTION; SEMANTICS; WORLD WIDE WEB;

BACKWARD INFORMATION FLOW; FORWARD INFORMATION FLOW; ROLE ENGINEERING; SYSTEM CENTRIC INFORMATION; UNIFIED MODELING LANGUAGE;

SECURITY OF DATA;

EID: 0242625196     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/775433.775434     Document Type: Conference Paper

References (20)

1. G.-J. Ahn and R. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and System Security, 3(4), November 2000.
2. E. Coyne. Role engineering. In Proceedings of 1st ACM Workshop on Role-Based Access Control, Gaithersburg, MD, November 1995.
3. P. Epstein and R. Sandhu. Towards a UML based approach to role engineering. In Proceedings of 4th ACM Workshop on Role-Based Access Control, pages 33-42, Fairfax, VA, October 28-29 1999.
4. P. Epstein and R. Sandhu. Engineering of role/permission assignment. In Proceedings of 17th Annual Computer Security Application Conference, New Orleans, LA, December 2001.
5. M. P. Gallaher, A. C. O'Connor, and B. Kropp. The economic impact of role-based access control. Planning report 02-1, National Institute of Standards and Technology, March 2002.
6. C. Goh and A. Baldwin. Towards a more complete model for role. In Proceedings of 3rd ACM Workshop on Role-Based Access Control, Fairfax, VA, October 22-23 1998.
7. P. Herzum and O. Sims. The business component approach. In OOPSLA '98 Business Object Workshop IV, Vancouver, Canada, July 13 1998.
8. A. Kern, M. Kuhlmann, A. Schaad, and J. Moffett. Observations on the role life-cycle in the context of enterprise security management. In Proceedings of 7th ACM Symposium on Access Control Models and Technologies, Monterey, CA, June 2002.
9. G. Neumann and M. Strembeck. A scenario-driven role engineering process for functional RBAC roles. In Proceedings of 7th ACM Symposium on Access Control Models and Technologies, Monterey, CA, June 2002.
10. OMG. Unified modeling language UML specification v1.4. Technical report, September 2001.
11. C. Ramaswamy. Business process driven framework for defining an access control service based on roles and rules. In 23rd National Information Systems Security Conference, Baltimore, MD, October 16-19 2000.
12. H. Roeckle, G. Schimpf, and R. Weidinger. Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In Proceedings of 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, July 26-27 2000.
13. R. Sandhu, V. Bhamidipati, and Q. Munawer. The ARBAC97 model for role-based administration of roles. ACM Transactions on Information and System Security, 2(1), February 1999.
14. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
15. R. S. Sandhu, D. Ferraiolo, and D. Kuhn. The NIST model for role-based access control: Towards a unified standard. In Proceedings of 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, July 26-27 2000.
16. A. Schaad, J. Moffett, and J. Jacob. The role-based access control system of a european bank: A case study and discussion. In Proceedings of 6th ACM Symposium on Access Control Models and Technologies, Chantilly, VA, May 3-4 2001.
17. D. Shin, G.-J. Ahn, S. Cho, and S. Jin. A role administration system in role-based authorization infrastructures-design and implementation. In Proceedings of 18th ACM Symposium on Applied Computing, Melbourne, FL, March 9-12 2003.
18. Z. Tari and S.-W. Chan. A role-based access control for intranet security. IEEE Internet Computing, September-October 1997.
19. D. Thomsen, D. O'Brien, and J. Bogle. Role based access control framework for network enterprises. In Proceedings of 14th Annual Computer Security Application Conference, pages 50-58, Scotsdale, AZ, December 7-11 1998.
20. L. Zhang, G.-J. Ahn, and B. Chu. A rule-based framework for role-based delegation. In Proceedings of 6th ACM Symposium on Access Control Models and Technologies, pages 153-162, Chantilly, VA, May 3-4 2001.