Systematic control and management of data integrity

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn 2006, Issue , 2006, Pages 101-110

  Byun, Ji Won ^a   Sohn, Yonglak ^b   Bertino, Elisa ^a  

^a Purdue University   (United States)

^b Seokyeong University   (South Korea)

Author keywords

Access Control; Integrity; Metadata Management; Policy Languages; Validation

Indexed keywords

COMPUTER SYSTEMS; DATA PRIVACY; METADATA; REGULATORY COMPLIANCE; SECURITY OF DATA; SOCIETIES AND INSTITUTIONS;

DATA PRIVACY REGULATIONS; INTEGRITY CONTROL SYSTEMS; METADATA MANAGEMENT; POLICY LANGUAGES;

DATABASE SYSTEMS;

EID: 33748085705     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1133058.1133074     Document Type: Conference Paper

References (33)

1. M. Greenwald, A. Keromytis, S. Ioannidis and J. Smith. Scalable security policy mechanisms for the internet. Technical Report MS-CIS-01-05, University of Pennsylvania, 2001.
2. G. Ahn and R. Sandhu. The RSL99 language for role-based separation of duty constraints. In the Fourth ACM Role-Based Access Control Workshop, 1999.
3. E. Bertino and R. Sandhu. Database security - concepts, approaches, and challenges. IEEE Transaction on dependable and secure computing, 2005.
4. K. Beznosov and Y. Deng. A framework for implementing role-based access control using CORBA security service. In the Fourth ACM Role-Based Access Control Workshop, 1999.
5. K.J. Biba. Integrity considerations for secure computer systems. Technical Report TR-3153, Mitre, 1977.
6. M. Bishop. Computer Security; Art and Science. Addison-Wesley, 2003.
7. F. Chen and R. Sandhu. Constraints for role-based access control. In the First ACM/NIST Role Based Access Control Workshop, 1995.
8. D. Clark and D. Wilson. A comparison of commercial and military computer security policies. In IEEE Symposium on Security and Privacy, 1987.
9. N. Damianou. A Policy Framework for Management of Distributed Systems. PhD thesis, The Imperial College of Science, London, 2002.
10. D. Ferraiolo, J. Cugini, and R. Kuhn. Role-based access control(RBAC): Features and motivations. In Computer Security Applications Conference, 1995.
11. Organization for Economic Co-operation and Development (OECD). OECD guidelines on the protection of privacy and transborder flows of personal data, 1980. Available at www1.oecd.org/publications/e-book/9302011E.PDF.
12. T. Fraser. LOMAC: Low water-mark integrity protection for COTS environments. In IEEE Symposium on Security and Privacy, 2000.
13. S. Garfinkel. Database Nation: The Death of Privacy in the 21st Century. O'Reilly, 2000.
14. R. Hayton, J. Bacon, and K. Moody. Access control in an open distributed environment. In IEEE Symposium on Security and Privacy, 1998.
15. M. Hitchens and V. Varadharajan. Tower: A language for role based access control. In the Policy Workshop, 2001.
16. J. Hoagland, R. Pandney, and K. Levitt. Security policy specification using a graphical approach. Technical Report CSE-98-3, University of California, Davis, 1998.
17. R. Bhatia, J. Lobo, and S. Naqvi. A policy description language. In the Sixteenth National Conference on Artificial Intelligence, 1999.
18. S. Jajodia, P. Samarati, and V. Subrahmanian. A logical language for expressing authorisations. In IEEE Symposium on Security and Privacy, 1997.
19. M. Kohli and J. Lobo. Policy based management of telecommunication networks. In the Policy Workshop, 1999.
20. J. Moffet and M. Sloman. Policy hierarchies for distributed systems management, IEEE JSAC Special Issue on Network Management, 11(9):1404-1414, December 1993.
21. M. Nash and K. Poland. Some conundrums concerning separation of duty. In IEEE Symposium on Security and Privacy, 1990.
22. United State Department of Justice. The federal privacy act, 1974. Available at www.usdoj.gov/foia/privstat.htm.
23. United State Office of Management and Budget. Guidelines for ensuring and maximizing the quality, objectivity, utility, and integrity of information disseminated by federal agencies, 2002. Available at http://www.whitehouse.gov/ omb/fedreg/reproducible.html.
24. R. Ortalo. A flexible method for information system security policy specification. In the 5th European Symposium on Research in Computer Security (ESORIC), 1998.
25. R. Ramakrishnan and J. Gehrke. Database Management Systems. McGraw-Hill, 2000.
26. A. Ribeiro, A. Zuquete, and P. Ferreira. SPL: An access control language for security policies with complex constraints. In Network and Distributed Security Symposium (NDSS), 2001.
27. R. Sandhu. Transaction control expressions for separation of duties. In the 4th Aerospace Computer Security Conference, 1988.
28. R. Sandhu. Terminology, criteria and system architectures for data integrity. In the NIST Invitational Workshop on Data Integrity, 1989.
29. R. Sandhu. Separation of duties in computerized information systems. In the IFIP WG11.3 Workshop on Database Security, 1990.
30. R. Sandhu. On five definitions of data integrity. In the IFIP WG11.3 Workshop on Database Security, 1993.
31. R. Sandhu and S. Jajodia. Integrity mechanisms in database management systems. In NIST-NCSC National Computer Security Conference, 1990.
32. R. Simon and M. Zurko. Separation of duty in role-based environments. In the 10th Computer Security Foundation Workshop, 1997.
33. Y. Snir, Y. Ramberg, J. Strassner, R. Cohen, and B. Moore. Policy QoS information model, 2003. Available at ftp://ftp.rfc-editor.org/in-notes/rfc3644. txt.