Role-based privilege and trust management

Computer Systems Science and Engineering

Volumn 20, Issue 6, 2005, Pages 401-410

  Shin, Dongwan ^a   Ahn, Gail Joon ^b  

^a NEW MEXICO INSTITUTE OF MINING AND TECHNOLOGY   (United States)

^b University of North Carolina at Charlotte   (United States)

Author keywords

Privilege management; Role based access control; Trust management

Indexed keywords

CONTROL SYSTEMS; INFORMATION MANAGEMENT; INFORMATION USE; INTEROPERABILITY; MATHEMATICAL MODELS; SOFTWARE PROTOTYPING;

PRIVILEGE MANAGEMENT; ROLE-BASED ACCESS CONTROL; TRUST MANAGEMENT;

INTERNET;

EID: 31544451249     PISSN: 02676192     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (25)

1. M. Abadi, M. Burrows, and B. Lampson. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, 1993.
2. G.-J. Ahn and R. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and System Security, 3(4), November 2000.
3. G.-J. Ahn, R. Sandhu, M. Kang, and J. Park. Injecting RBAC to secure a web-based workflow system. In Proceedings of 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, July 26-27 2000. ACM.
4. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote trust-management system version 2. RFC 2704, September 1999.
5. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proceedings of IEEE Symposium on Security and Privac, pages 164-173, Oakland, CA, May 1996.
6. Y. H. Chu, J. Feigenbaum, B. LaMacchia, P. Resnick, and M. Strauss. REFEREE: Trust management for web applications. Computer Networks and ISDN systems, 29(8-13), September 1997.
7. N. Dimmock, A. Belokosztolszki, D. Eyers, J. Bacon, and K. Moody. Using trust and risk in role-based access control policies. InProceedings of 9th ACM Symposium on Access Control Models and Technologies, Yorktown, NY, June 2004.
8. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. SPKI certificate theory. RFC 2693, September 1999.
9. S. Farrell and R. Housley. An internet attribute certificate profile for authorization. Technical report, PKIX Working Group, June 2001.
10. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control ACM Transactions on Information and System Security, 4(3), August 2001.
11. A. Herzberg, Y. Mass, J. Michaeli, D. Naor, and Y. Ravid. Access control meets public key infrastructure, or: assigning roles to strangers. In Proceedings of IEEE Symposium on Security and Privacy, Oakland, CA, May 2000.
12. ITU. ITU-T Recommendation X.509. Information Technology: Open Systems Interconnection - The Directory: Public-Key And Attribute Certificate Frameworks, 2000. ISO/IEC 9594-8.
13. T. Jaeger. On the increasing importance of constraints. In Proceedings of 4th ACM Workshop on Role-Based Access Control, pages 33-42, Fairfax, VA, October 28-29 1999. ACM.
14. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. The Journal Of Computer Security, 11(1), February 2003.
15. J. Linn and M. Nystrom. Attribute certification: An enabling technology for delegation and role-based controls in distributed environments. In Proceedings of 4th ACM Workshop on Role-Based Access Control, Fairfax, VA, October 28-29 1999. ACM.
16. Open Software Foundation, Cambridge, MA.OSF DCE 1.0 Application Development Guide, 1992.
17. Open Software Foundation, Cambridge, MA. OSF DCE 1.0 Introduction to DCE, 1992.
18. J. Park, G. Ahn, and R. Sandhu. Rbac on the web using Idap. In Proceedings of 15th Annual IFIP WG 11.3 Working Conference on Data and Application Security, Ont., Canada, July 2001.
19. J. Park, R. Sandhu, and G. J. Ahn. Role-based access control on the web. ACM Transactions on Information and System Security, 4(1), February 2001.
20. R. L. Rivest and B. Lampson. SDSI - a simple distributed security infrastructure. Technical report, September 1996.
21. R. Sandhu. Role activation hierarchies. In Proceedings of 3rd ACM Workshop on Role-Based Access Control, pages 33-40, Fairfax, VA, October 22-23 1998. ACM.
22. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
23. D. Shin, G.-J. Ahn, and S. Cho. Role-based EAM using x.509 attribute certificate. In Proceedings of Sixteenth Annual IFIP WG 11.3 Working conference on Data and Application Security, Cambridge, UK, July 29-31 2002.
24. M. Thompson, W. Johnston, S. Mudumbai, G. Hoo, K. Jackson, and A. Essiari. Certificate-based access control for widely distributed resources. In Proceedings of 8th USENIX Security Symposium, Washington, D.C., August 23-26 1999.
25. S. Weeks.Understanding trust management systems. In Proceedings of IEEE Symposium on Security and Privacy, Oakland, CA, May 2001.