Cassandra: Distributed access control policies with tunable expressiveness

Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

Volumn , Issue , 2004, Pages 159-168

  Becker, Moritz Y ^a   Sewell, Peter ^a  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; POLICY EVALUATION; ROLE DELEGATION; TRUST MANAGEMENT;

ALGORITHMS; COMPUTER PROGRAMMING LANGUAGES; DATABASE SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; PUBLIC POLICY; SECURITY OF DATA;

DISTRIBUTED PARAMETER CONTROL SYSTEMS;

EID: 11244331795     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2004.1309162     Document Type: Conference Paper

References (22)

1. N. Baker and H. Sondergaard. Definiteness analysis for CLP(R). In Australian Computer Science Conference, pages 321-332, 1993.
2. S. Barker and P. J. Stuckey. Flexible access control policy specification with constraint logic programming. ACM Transactions on Information and System Security, 6(4):501-546, 2003.
3. M. Y. Becker and P. Sewell. Cassandra: Flexible trust management, applied to electronic health records. In Proceedings of the 17th IEEE Computer Security Foundations Workshop, June 2004. To appear.
4. M. Blaze, J. Feigenbaum, and A. D. Keromytis. KeyNote: Trust management for public-key infrastructures (position paper). Lecture Notes in Computer Science, 1550:59-63, 1999.
5. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In IEEE Symposium on Security and Privacy, pages 164-173, 1996.
6. D. Clarke, J.-E. Elien, C. Ellison, M. Fredette, A. Morcos, and R. L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
7. N. Damianou, N. Dulay, E. Lupu, and M. Sloman. The Ponder policy specification language. In Policy Workshop, 2001.
8. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. 4, (3):224-274, 2001.
9. C. A. Gunter and T. Jim. Policy-directed certificate retrieval. Software - Practice and Experience, 30(15):1609-1640, 2000.
10. J. Jaffar and M. J. Maher. Constraint logic programming: a survey. Journal of Logic Programming, 19/20:503-581, 1994.
11. T. Jim. SD3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 106-115, 2001.
12. N. Li and J. C. Mitchell. Datalog with constraints: A foundation for trust management languages. In Proceedings of the 5th International Symposium on Practical Aspects of Declarative Languages, pages 58-73, 2003 2003.
13. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130, 2002.
14. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management: extended abstract. In ACM Conference on Computer and Communications Security, pages 156-165, 2001.
15. P. Revesz. Introduction to constraint databases. Springer Verlag, 2002.
16. R. L. Rivest. Can we eliminate certificate revocations lists? In Financial Cryptography, pages 178-183, 1998.
17. R. Sandhu. Rationale for the RBAC96 family of access control models. In Proceedings of the 1st ACM Workshop on Role-Based Access Control, 1997.
18. D. Toman. Memoing evaluation for constraint extensions of datalog. Constraints, 2(3/4):337-359, 1997.
19. W. Winsborough, K. Seamons, and V. Jones. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, volume 1, pages 88-102, 2000.
20. W. H. Winsborough and N. Li. Towards practical automated trust negotiation. In Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks, pages 92-103, 2002.
21. W. Yao, K. Moody, and J. Bacon. A model of OASIS role-based access control and its support of active security. ACM Transactions on Information and System Security, 5(4), 2002.
22. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Transactions on Information and System Security, 6(1):1-42, 2003.