A model for content-dependent access control for Web-based services with role-based approach

Proceedings - International Workshop on Database and Expert Systems Applications, DEXA

Volumn 2003-January, Issue , 2003, Pages 209-214

  Wolf, R ^a   Keinz, T ^a   Schneider, M ^a  

^a FRAUNHOFER INSTITUTE FOR SECURE INFORMATION TECHNOLOGY SIT   (Germany)

Author keywords

Access control; Access protocols; Centralized control; Context modeling; Context aware services; Grid computing; Information security; Online Communities Technical Collaboration; Protection; Telematics

Indexed keywords

EXPERT SYSTEMS; GRID COMPUTING; INFORMATION SERVICES; SECURITY OF DATA; WEB SERVICES; WEBSITES; WIRELESS TELECOMMUNICATION SYSTEMS;

ACCESS PROTOCOLS; CENTRALIZED CONTROL; CONTEXT AWARE SERVICES; CONTEXT MODELING; ON-LINE COMMUNITIES; PROTECTION; TELEMATICS;

ACCESS CONTROL;

EID: 33645646528     PISSN: 15294188     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DEXA.2003.1232025     Document Type: Conference Paper

References (8)

1. J. Barkley, A. Cincotta, D. Ferraiolo, S. Gavrilla, D. Kuhn. Role-based access control for the world wide web. In 20th National Information Systems Security Conference, 1997.
2. E. Bertino, E. Pagani, G. Rossi, P. Samarati. Protecting information on the web. Comm. of the ACM, 43(11es), 2000.
3. D. Chadwick, A. Otenko. The PERMIS X.509 role based privilege management infrastructure. In 7th ACM Symp. on Access Control Models and Technologies (SACMAT 2002). 2002.
4. D. Ferraiolo, R. Sandhu, S. Gavrila, D. Kuhn, R. Chandramouli. Proposed NIST standard for role-based access control. ACM Trans. Inform. and System Security, 4(3), 2001.
5. J. Joshi, W. Aref, A. Ghafoor, E. Spafford. Security models for web-based applications. Comm. of the ACM, 44(2), 2001.
6. J. Park, R. Sandhu, G. Ahn. Role-based access control on the web. ACM Trans. Inform. and System Security, 4(1), 2001.
7. R. Sandhu. Role activation hierarchies. In 3rd ACM workshop on Role-based access control. 1998.
8. Z. Tari, S. Chan. A role-based access control model for intranet security. IEEE Internet Computing, 1(5), 1997.