Rule-Based RBAC with negative authorization

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2004, Pages 405-415

  Al Kahtani, Mohammad A ^a   Sandhu, Ravi ^b  

^a Saudi Air Defense ^*

^b GEORGE MASON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MODEL; NEGATIVE AUTHORIZATION; ROLE-BASED ACCESS CONTROL (RBAC);

AUTOMATION; CONTROL SYSTEMS; DATABASE SYSTEMS; INTERNET; WEBSITES;

SECURITY OF DATA;

EID: 21644481193     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2004.32     Document Type: Conference Paper

References (17)

1. R. Sandhu, E. Coyne, H. Feinstein and C. Youman, "Role-Based Access Control Model", IEEE Computer, 29(2), Feb. 1996.
2. R. Sandhu, D. Ferraiolo, and R. Kuhn, "The NIST Model for Role-Based Access Control: Towards a Unified Standard", In Proceedings of the fifth ACM workshop on Role-based access control table of contents, Berlin, Germany, 2000, Pages: 47-63.
3. D. Ferraiolo, R. Sandhu, S. Gavrila, and R. Kuhn, "Proposed NIST Standard for role-based access control: towards a unified standard", In ACM Transaction on Information and System Security (TISSEC), Vol. 4, Number 3, August 2001.
4. D. Ferraiolo, J. Barkley, and R. Kuhn, "A Role Based Access Control Model and Reference Implementation Within a Corporate Intranet", ACM Transactions on Information and Systems Security, 2(1):34-64, February 1999.
5. J. Park, R. Sandhu and G. Ahn, "Role-based Access Control on the Web", In ACM Transactions on Information and System Security, Vol. 4, No 1, 2001.
6. Joon S. Park, Ravi Sandhu, and SreeLatha Ghanta. "RBAC on the Web by Secure Cookies" In Proceedings of the IFIP WG11.3 Workshop on Database Security, Chapman & Hall, July, 1999.
7. A. Kern, A. Schaad and J. Moffett, "An Administration Concept for the Enterprise Role-Based Access Control Model", SACMAT'03, June 1-4, Como, Italy.
8. C. Ramaswamy and R. Sandhu, "Role-Based Access Control Features in Commercial Database Management Systems", NISSC 1998.
9. A. Kern, "Advanced Features for Enterprise-Wide Role-Based Access Control", In Proceedings of the 18th Annual Computer Security Applications Conference, Las Vegas, Nevada, USA, December, 2002, pages 333-342.
10. M. Al-Kahtani and R. Sandhu, "A Model for Attribute-Based User-Role Assignment", In Proceedings of the 18th Annual Computer Security Applications Conference, Las Vegas, Nevada, December 9-13, 2002.
11. M. Al-Kahtani and R. Sandhu, "Induced Role Hierarchies with Attribute-Based RBAC", In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies (SACMAT), Villa Gallia, Como, Italy, June 2-3, 2003.
12. S. Jajodia, P. Samarati, M. Sapino and V. Subrahmanian, "Flexible support for Multiple Access Control Policies" , In ACM Transactions on Database Systems, Vol. 26, No. 2, June 2001.
13. E. Bertino, P. Samarati, and S. Jajodia, "An Extended Authorization Model for Relational Databases", In IEEE Transactions On Knowledge and Data Engineering, Vol. 9, No. 1, January-February 1997.
14. E. Bertino, P. Samarati, and S. Jajodia, "Authorizations in Relational Database Management Systems", In Proceedings of the 1st ACM Conference on Computer and Communications Security (Fairfax, VA.Nov. 3-5). ACM, New York, pp. 130-139.
15. S. Jajodia, P. Samarati and V.S. Subrahmanian, "A logical Language for Expressing Authorizations", In Proceedings of the 1997 IEEE Symposium on Security and Privacy, 1997.
16. M. Al-Kahtani, "A Family of Models for Rule-Based User-Role assignment", A Ph.D. dissertation submitted to George Mason University, 2004.
17. R. Sandhu, V. Bhamidipati, and Q. Munawer, "The ARBAC97 Model for Role-based Administration of Roles", ACM Transactions on Information and System Security. Vol.2, No.1, Feb. 1999, pages 105-135.