Constraint generation for separation of duty

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 130-138

  Chen, Hong ^a   Li, Ninghui ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

Constraints; Role based access control; Separation of duty

Indexed keywords

CONSTRAINT THEORY; HIERARCHICAL SYSTEMS; PROBLEM SOLVING; PUBLIC POLICY; SET THEORY; USER INTERFACES;

ROLE BASED ACCESS CONTROL; ROLE BASED ACCESS CONTROL (RBAC); SEPARATION OF DUTY (SOD); STATICALLY MUTUALLY EXCLUSIVE ROLE (SMER);

SECURITY OF DATA;

EID: 33748060530     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133077     Document Type: Conference Paper

References (26)

1. G.-J. Ahn and R. S. Sandhu. The RSL99 language for role-based separation of duty constraints. In Proceedings of the 4th Workshop on Role-Based Access Control, pages 43-54, 1999.
2. G.-J. Ahn and R. S. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and System Security, 3(4):207-226, Nov. 2000.
3. ANSI. American national standard for information technology - role based access control. ANSI INCITS 359-2004, Feb. 2004.
4. D. D. Clark and D. R. Wilson. A comparison of commercial and military computer security policies. In Proceedings of the 1987 IEEE Symposium on Security and Privacy, pages 184-194. IEEE Computer Society Press, May 1987.
5. J. Crampton. Authorizations and Antichains, PhD thesis, Birbeck College, University of London, UK, 2002.
6. J. Crampton. Specifying and enforcing constraints in role-based access control. In Proceedings of the Eighth ACM Symposium on Access Control Models and Technologies (SACMAT 2003), pages 43-50, Como, Italy, June 2003.
7. N. Een and N. Sorensson. The minisat page. http:/www.cs.chalmers.se/Cs/ Research/FormalMethods/MiniSat/.
8. D. F. Ferraiolo, J. A. Cuigini, and D. R. Kuhn. Role-based access control (RBAC): Features and motivations. In Proceedings of the 11th Annual Computer Security Applications Conference (ACSAC'95), Dec. 1995.
9. D. F. Ferraiolo and D. R. Kuhn. Role-based access control. In Proceedings of the 15th National Information Systems Security Conference, 1992.
10. D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli. Role-Based Access Control. Artech House, Apr. 2003.
11. D. F. Ferraiolo, R. S. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Transactions on Information and Systems Security, 4(3):224-274, Aug. 2001.
12. M. R. Garey and D. J. Johnson. Computers And Intractability: A Guide to the Theory of NP-Completeness. W.H. Freeman and Company, 1979.
13. V. D. Gligor, S. I. Gavrila, and D. F. Ferraiolo. On the formal definition of separation-of-duty policies and their composition. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 172-183, May 1998.
14. T. Jaeger. On the increasing importance of constraints. In Proceedings of ACM Workshop on Role-Based Access Control, pages 33-42, 1999.
15. T. Jaeger and J. E. Tidswell. Practical safety in flexible access control models. ACM Transactions on Information and System Security, 4(2):158-190, May 2001.
16. D. R. Kuhn. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems. In Proceedings of the Second ACM Workshop on Role-Based Access Control (RBAC'97), pages 23-30, Nov. 1997.
17. N. Li, Z. Bizri, and M. V. Tripunitara. On mutually-exclusive roles and separation of duty. In Proceedings of the 11th ACM Conference on Computer and Communications Security (CCS-11), pages 42-51. ACM Press, Oct. 2004.
18. N. Li, Z. Bizri, and M. V. Tripunitara. On mutually-exclusive roles and separation of duty. Technical Report CERIAS-TR-2004-21, Center for Education and Research in Information Assurance and Security, Purdue University, June 2004.
19. M. J. Nash and K. R. Poland. Some conundrums concerning separation of duty. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 201-209, May 1990.
20. C. H. Papadimitriou. Computational Complexity. Addison Wesley Longman, 1994.
21. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9): 1278-1308, September 1975.
22. R. Sandhu. Separation of duties in computerized information systems. In Proceedings of the IFIP WG11.3 Workshop on Database Security, Sept. 1990.
23. R. S. Sandhu. Transaction control expressions for separation of duties. In Proceedings of the Fourth Annual Computer Security Applications Conference (ACSAC'88), Dec. 1988.
24. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
25. T. T. Simon and M. E. Zurko. Separation of duty in role-based environments. In Proceedings of The 10th Computer Security Foundations Workshop, pages 183-194. IEEE Computer Society Press, June 1997.
26. J. Tidswell and T. Jaeger. An access control model for simplifying constraint expression. In Proceedings of ACM Conference on Computer and Communications Security, pages 154-163, 2000.