The role control center: Features and case studies

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2003, Pages 12-20

  Ferraiolo, David F ^a   Ahn, Gail Joon ^b   Chandramouli, R ^a   Gavrila, Serban I ^c  

^a NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

^b University of NC at Charlotte   (United States)

^c VDG Inc   (United States)

Author keywords

Administrative roles; Authorization management; Role graph; Role hierarchy; Separation of duty

Indexed keywords

CLIENT SERVER COMPUTER SYSTEMS; COMPUTER OPERATING SYSTEMS; DATA STRUCTURES; GRAPHICAL USER INTERFACES; JAVA PROGRAMMING LANGUAGE; MANAGEMENT INFORMATION SYSTEMS; NETWORK PROTOCOLS; WEB BROWSERS;

ADMINISTRATIVE ROLES; AUTHORIZATION MANAGEMENT; ENTERPRISE ROLE-BASED ACCESS CONTROL MODEL; ROLE CONTROL CENTER; ROLE HIERARCHY; SEPARATION OF DUTY;

SECURITY OF DATA;

EID: 0242709323     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. Gail-J. Ahn and Ravi Sandhu. The RSL99 language for role-based separation of duty constraints. In Proceedings of 4th ACM Workshop on Role-Based Access Control, pages 43{54. ACM, 1999.
2. Gail-J. Ahn, Ravi Sandhu, Role-based authorization constraints specification, ACM Transactions on Information and Systems Security 3 (4) (2002).
3. Enterprise Security Station - User Guide (Windows GUI) - BMC Software Inc., 2002.
4. R. Chandramouli, R. Sandhu, "Role Based Access Control Features in Commercial Database Management Systems", 21st National Information Systems Security Conference, October, 1998. Crystal City, Virginia.
5. G. Faden, "RBAC in UNIX Administration", 4th ACM workshop on Role-based Access Control, Fairfax, VA, USA, 1999.
6. D. Ferraiolo, R. Sandhu, S. Gavrila, R. Kuhn, R. Chandramouli, Proposed NIST standard for role-based access control, ACM Transactions on Information and Systems Security 4 (3) (2001).
7. V. D. Gligor, S.I. Gavrila, D.F. Ferraiolo: "On the Formal Definition of Separation-of-Duty Policies and their Composition," Proc. 1998 Symposium on Security and Privacy, May 1998, Oakland, California.
8. Trent Jaeger and Jonathon Tidswell "Practical Safety in Flexible Access Control Models." ACM Transactions on Information and Systems Security, Volume 4, Number 3, August 2001.
9. M. Nyanchama, S. Osborn: "The Graph Model and Conflict of Interest," ACM Transactions on Information and System Security, 2(1), February 1999.
10. R. Sandhu, V. Bhamidipati, The URA97 model for role-based administration of user-role assignment, in: T.Y. Lin, X. Qian (Eds.), Database Security XI: Status and Prospects, North-Holland, Amsterdam, 1997.
11. R.T. Simon, M.E. Zurko: Separation of Duty in Role-Based Environments, in Proc. Computer Security Foundations Workshop X, Rockport, Massachusetts, June 1997.
12. Enterprise Security Architecture using IBM Tivoli Security Solutions (2002) - IBM Corporation