Observations on the role life-cycle in the context of enterprise security management

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2002, Pages 43-51

  Kern, Axel ^a   Kuhlmann, Martin ^a   Schaad, Andreas ^b   Moffett, Jonathan ^b  

^a Systor GmbH and Co KG   (Germany)

^b UNIVERSITY OF YORK   (United Kingdom)

Author keywords

Distributed system management; Enterprise security management (ESM); Enterprise user administration (EUA); Process model; Role engineering; Role life cycle; Role management; Security administration; Security administration manager (SAM)

Indexed keywords

INFORMATION MANAGEMENT; LIFE CYCLE; SOFTWARE ENGINEERING; SYSTEMS ANALYSIS;

ENTERPRISE SECURITY MANAGEMENT; ENTERPRISE USER ADMINISTRATION; ROLE-BASED SYSTEMS; SECURITY ADMINISTRATION MANAGER;

SECURITY OF DATA;

EID: 0242709337     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/507716.507718     Document Type: Conference Paper

References (20)

1. Biddle B. and E. Thomas, Role Theory: Concepts and Research. New York: Robert E. Krieger Publishing Company, 1979.
2. Ferraiolo D. and R. Kuhn, "Role-Based Access Control." presented at 15th NCSC National Computer Security Conference, Baltimore, 1992.
3. Schaad A., J. Moffett, and J. Jacob, "The access control system of a European bank - a case study." presented at Sixth ACM Symposium on Access Control Models and Technologies (SACMAT), Chantilly, VA, USA, 2001.
4. Sandhu R., E. Coyne, H. Feinstein, and C. Youman, "Role-based access control models". IEEE Computer, vol. 29, no. 2, pp. 38-47, 1996.
5. Lupu E., "A Role-Based Framework for Distributed Systems Management." PhD Thesis: Department of Computing. London, Imperial College, 1998.
6. Fernandez E. and J. Hawkins, "Determining role rights from use cases." presented at Second ACM Workshop on Role-Based Access Control, Fairfax, VA, USA, 1997.
7. Epstein P., Sandhu, R., "Towards a UML based approach to role engineering." presented at Fourth ACM Workshop on Role-Based Access Control, Fairfax, VA, USA, 1999.
8. Thomsen D., D. O'Brian, and J. Bogle, "Role Based Access Control for Network Enterprises." presented at 14th Annual Computer Security Applications Conference, Gaithersburg, MD, USA, 1998.
9. Roeckle H., G. Schimpf, and R. Weidinger, "Process-Oriented Approach for Role-Finding to Implement Role-Based Security Administration in a Large Industrial Organisation." presented at Fifth ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
10. Moenkeberg A. and R. Rakete, "Three for One: Role-Based Access Control Management in Rapidly Changing Heterogeneous Environments." presented at Fifth ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
11. McDermid J., Software Engineer's Reference Book: Butterworth Heinemann, 1990.
12. Pressman R., Software Engineering: A Practitioner's Approach: McGrawHill, 2000.
13. Sommerville I., Software Engineering: Addison-Wesley, 2001.
14. Booch G., I. Jacobson, and J. Rumbaugh, The Unified Software Development Process: Addison Wesley, 1998.
15. Balzert H., "Lehrbuch der Software-Technik II", Spektrum Akademischer Verlag, Heidelberg/Berlin, 1998.
16. Awischus R., "Role based access control with the security administration manager (SAM)." presented at the Second ACM Workshop on Role-Based Access Control, Fairfax, USA, 1997.
17. Ferraiolo D., R. Sandhu, S. Gavrila, R. Kuhn and R. Chandramouli, "Proposed NIST standard for role-based access control", ACM Transactions on Information and Systems Security (TISSEC), vol. 4, no. 3, 2001.
18. Georgiadis C., I. Mavridis, G. Pangalos and R. Thomas, "Flexible Team-Based Access Control Using Contexts" presented at Sixth ACM Symposium on Access Control Models and Technologies (SACMAT), Chantilly, VA, USA, 2001.
19. Finkelstein A., J. Kramer, and B. Nuseibeh, Software Process Modelling and Technology. Taunton, UK: Research Studies Press Ltd., 1994.
20. Jaccheri M., G. Picco, and P. Lago, "Eliciting Software Process Models with the E3 Language." ACM Transactions on Software Engineering and Methodology, vol. 7, pp. 368-410, 1998.