Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 228-236

  Du, Siqing ^a   Joshi, James B D ^a  

^a UNIVERSITY OF PITTSBURGH   (United States)

Author keywords

Hierarchy; Multidomain; Role based access control; Role mapping; Secure interoperation

Indexed keywords

CONSTRAINT THEORY; DATA STRUCTURES; LARGE SCALE SYSTEMS; PUBLIC POLICY; QUERY LANGUAGES; SECURITY OF DATA;

HYBRID HIERARCHY; ROLE BASED ACCESS CONTROL; ROLE MAPPING; SECURE INTEROPERATION;

HIERARCHICAL SYSTEMS;

EID: 33748076789     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133090     Document Type: Conference Paper

References (20)

1. Biskup, J., Flegel, U., Karabulut, Y. Secure Mediation: Requirements and Design. Proceedings of 12th Annual IFIP WG 11.3 Working Conference on Database Security, 1998.
2. Bonatti, P.A., Sapino, M. L., Subrahmanian, V.S. Merging Heterogeneous Security Orderings.Esorics'96,183-197.
3. Chandran, S.M., Joshi, J.B.D. Towards Administration of a Hybrid Role Hierarchy, IEEE International Conference on Information Reuse and Integration, 2005.
4. Cormen, T.H., Leiserson, C.E., Rivest, R.L., Stein, C. Introduction to Algorithms, Second Edition, MIT press, 1991.
5. Dawson, S., Qian, S., Samarati, P. Providing Security and Interoperation of Heterogeneous Systems. International Journal of Distributed and Parallel Databases. 2000.
6. Ferraiolo, D. F., Gilbert, D. M., Lynch, N. An Examination of Federal and Commercial Access Control Policy Needs, NISTNCSC National Computer Security,1993, 107-116.
7. Ferraiolo, D.F, Kuhn, D.R. Role Based Access Control. 15th National Computer Security Conference, 1992.
8. Gong, L., Qian, X. Computational Issues in Secure Interoperation. IEEE Transaction on Software and Engineering, Vol. 22, No. 1, January 1996.
9. Johnson, D.S., Approximation algorithms for combinatorial problems. J. Comput. System Sci. 9, 1974. 256-278.
10. Joshi, J.B.D., Aref, W.G., Ghafoor, A., Spafford, E.H. Security Models for Web-based Applications. Communications of the ACM, 44, 2, 2001, 38-72.
11. Joshi, J.B.D., Bertino, E., Ghafoor, A. Temporal hierarchies and inheritance semantics for GTRBAC, Proceedings of the seventh ACM symposium on Access control models and technologies, Monterey, California, USA, 2002, 74 - 83.
12. Joshi, J.B.D., Bertino, E., Latif, U., Ghafoor, A. A Generalised Temporal Role Based Access Control Model. IEEE Transactions on Knowledge and Data Engineering, 17(1), 2005, 4-23.
13. Joshi, J.B.D., Bertino, E., Ghafoor, A. Formal Foundation for Hybrid Hierarchies in GTRBAC. ACM Transactions on Information and System Security, (revised submission).
14. Joshi, J.B.D., Bertino, E., Ghafoor, A. An Analysis of Expressiveness and Design Issues for the Generalized Temporal Role-Based Access Control Model, IEEE Transactions on Dependable and Secure Computing, Vol. 2, No. 2, April 2005.
15. Osborn, S., Sandhu, R., Munawer, Q. Configuring Role-based Access Control to Enforce Mandatory and Discretionary Access Control Policies. ACM Transactions on Information and System Security, 3(2), 2000, 85-106.
16. Piromruen, S., Joshi, J.B.D. An RBAC Framework for Time Constrained Secure Interoperation in Multi-domain Environment, IEEE Workshop on Object-oriented Real-time Databases (WORDS-2005), 2005.
17. Sandhu, R. Role hierarchies and constraints for lattice-based access controls. Computer Security - Esorics'96, LNCS N. 1146, 1996, 65-79.
18. Sen, S. Minimal cost set covering using probabilistic methods. Proceedings of the 1993 ACM/SIGAPP symposium on Applied computing: states of the art and practice. Indianapolis, Indiana, United States, 1993, 157-164.
19. Shafiq, B., Joshi, J.B.D., Bertino, E., Ghafoor, A. Secure Interoperation In a Multi-Domain Environment Employing RBAC Policies, Knowledge and Data Engineering, 2005.
20. Shehab, M., Bertino, E., Ghafoor, A. SERAT: SEcure Role mApping Technique for Decentralized Secure Interoperability,. In Proceedings of the ACM Symposium on Access Control, Models and Technologies (SACMAT 05), Stockholm, Sweden, 2005.