A lightweight approach to specification and analysis of role-based access control extensions

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2002, Pages 13-22

  Schaad, Andreas ^a   Moffett, Jonathan D ^a  

^a UNIVERSITY OF YORK   (United Kingdom)

Author keywords

Alloy; ARBAC97; RBAC96; Separation of duties

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; SECURITY OF DATA; SET THEORY; SYSTEMS ANALYSIS;

ALLOY LANGUAGE; ROLE BASE ACCESS CONTROL; SECURITY POLICIES;

HIGH LEVEL LANGUAGES;

EID: 0242625217     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/507711.507714     Document Type: Conference Paper

References (17)

1. G. Ahn. RCL 2000. Phd dissertation, George Mason University, 2000.
2. D. Clark and D. Wilson. A comparison of commercial and military security policies. In IEEE Symposium on Security and Privacy, pages 184-194, Oakland, California, 1987.
3. V. Gligor, S. Gavrila, and D. Ferraiolo. On the formal definition of separation-of-duty policies and their composition. In IEEE Symposium on Security and Privacy, pages 172-185, Oakland, CA, 1998.
4. D. Jackson. Alloy: A leightweight object modelling notation. Technical Report 797, MIT Laboratory for Computer Science, 2000.
5. D. Jackson, I. Schechter, and I. Shlyakhter. Alcoa: the Alloy constraint analyzer. In Proc. International Conference on Software Engineering, Limerick, Ireland, 2000.
6. T. Jaeger and J. Tidswell. Practical safety in flexible access control models. ACM Transactions on Information and System Security (TISSEC), 4(2), 2001.
7. R. Kuhn. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems. In 2nd ACM workshop on Role-based access control, pages 23-30, 1997.
8. J. Moffett. Control principles and role hierarchies. In 3rd ACM Workshop on Role Based Access Control, pages 63-72, George Mason University, Fairfax, VA, 1998.
9. J. Moffett and E. Lupu. The uses of role hierarchies in access control. In 4th ACM Workshop on Role-Based Access Control, pages 153-160, Fairfax, Virginia, 1999.
10. M. Nash and K. Poland. Some conundrums concerning separation of duty. In IEEE Symposium on Security and Privacy, pages 201-209, Oakland, CA, 1990.
11. R. Sandhu, V. Bhamidipati, and Q. Munawer. The ARBAC97 model for role-based administration of roles. ACM Transactions. Inf. Syst. Security, 2(1):105-135, 1999.
12. R. Sandhu and F. Chen. Constraints for role-based access control. In 1st ACM Workshop on Role-based access control, 1996.
13. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, 1996.
14. R. Sandhu, D. Ferraiolo, and R. Kuhn. The NIST model for role-based access control: Towards a unified standard. In 5th ACM Workshop on Role-based access control, Berlin, Germany, 2000.
15. A. Schaad. Conflict detection in a role-based delegation model. In 17th Annual Computer Security Applications Conference, New Orleans, 2001.
16. A. Schaad, J. Moffett, and J. Jacob. The access control system of a European bank - a case study. In 6th ACM Symposium on Access Control Models and Technologies (SACMAT), Chantilly, VA, USA, 2001.
17. R. Simon and M. Zurko. Separation of duty in role-based environments. In Computer Security Foundations Workshop X, Rockport, MA, 1997.