Controlling access to documents: A formal access control model

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3995 LNCS, Issue , 2006, Pages 352-367

  Sevinç, Paul E ^a   Basin, David ^a   Olderog, Ernst Rüdiger ^b  

^a ETH ZURICH   (Switzerland)

^b UNIVERSITY OF OLDENBURG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

MATHEMATICAL MODELS; PROGRAM DOCUMENTATION; SECURITY OF DATA; SYSTEMS ANALYSIS; XML;

CONTROL MODEL; DOCUMENTS; USAGE CONTROL;

SECURITY SYSTEMS;

EID: 33746653767     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11766155_25     Document Type: Conference Paper

References (25)

1. Bertino, E., Sandhu, R.: Database security-concepts, approaches, and challenges. IEEE Transactions on Dependable and Secure Computing 2 (2005) 2-19
2. Castano, S., Fugini, M., Martella, G., Samarati, P.: Database Security. ACM Press (1995)
3. Smith, B., Komar, B.: Microsoft Windows Security Resource Kit. Second edn. Microsoft Press (2005)
4. W3C (World Wide Web Consortium): Extensible Markup Language (XML). (W3C Recommendation)
5. International Organization for Standardization: Information technology - Z formal specification notation - Syntax, type system and semantics. First edn. (2002)
6. Hoare, C.: Communicating Sequential Processes. Prentice Hall (1985)
7. Fischer, C.: CSP-OZ: a combination of Object-Z and CSP. In: Proc. 2nd IFIP Workshop on Formal Methods for Open Object-Based Distributed Systems (FMOODS). (1997) 423-438
8. ABC usage control model. ACM Transactions on Information and System Security 7 (2004) 128-174
9. Karjoth, G., Schunter, M., Waidner, M.: Platform for enterprise privacy practices: Privacy-enabled management of customer data. In Dingledine, R., Syverson, P., eds.: Privacy Enhancing Technologies. Volume 2482 of Lecture Notes in Computer Science., Springer-Verlag (2003) 69-84
10. IBM Zurich Research Laboratory: Enterprise privacy technologies. (WWW)
11. Bettini, C., Jajodia, S., Wang, X.S., Wijesekera, D.: Provisions and obligations in policy rule management. Journal of Network and Systems Management 11 (2003) 351-372
12. Bettini, C., Jajodia, S., Wang, X.S., Wijesekera, D.: Reasoning with advanced policy rules and its application to access control. International Journal on Digital Libraries 4 (2004) 156-170
13. Hilty, M., Basin, D., Pretschner, A.: On obligations. In de Capitani di Vimercati, S., Syverson, P., Gollmann, D., eds.: Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS 2005). Volume 3679 of Lecture Notes in Computer Science., Springer-Verlag (2005) 98-117
14. Sevinç, P.E., Basin, D.: Controlling access to documents: A formal access control model. Technical report, Swiss Federal Institute of Technology Zurich (2006)
15. OASIS: extensible Access Control Markup Language (XACML). (Specification)
16. W3C (World Wide Web Consortium): Document Object Model (DOM) Level 3 Core Specification. (W3C Recommendation)
17. Damiani, E., De Capitani di Vimercati, S., Paraboschi, S., Samarati, P.: A fine-grained access control system for XML documents. ACM Transactions on Information and System Security 5 (2002) 169-202
18. IBM Tokyo Research Laboratory: XML Access Control Language (XACL). (WWW)
19. Kudo, M., Hada, S.: XML document security based on provisional authorization. In: Proceedings of the 7th ACM conference on Computer and communications security, Athens (2000) 87-96
20. Bertino, E., Castano, S., Ferrari, E.: Securing XML documents with Author-X. IEEE Internet Computing 5 (2001) 21-31
21. Bertino, E., Carminati, B., Ferrari, E.: Access control for XML documents and data. Information Security Technical Report 9 (2004) 19-34
22. Gabillon, A., Munier, M., Bascou, J.J., Gallon, L., Bruno, E.: An access control model for tree data structures. In: Proceedings of the 5th International Conference on Information Security. (2002) 117-135
23. Gabillon, A.: An authorization model for XML databases. In: Proceedings of the 11th ACM conference on Computer and communications security. (2004)
24. Niézette, M., Stévenne, J.M.: An efficient symbolic representation of periodic time. In: Proceedings of the ISMM International Conference on Information and Knowledge Management (CIKM-92). (1992) 161-168
25. Trusted Computing Group: TCG TPM Specification Version 1.2. (TCG Specification)