Attributed Based Access Control (ABAC) for web services

Proceedings - 2005 IEEE International Conference on Web Services, ICWS 2005

Volumn 2005, Issue , 2005, Pages 561-569

  Yuan, Eric ^a   Tong, Jin ^a  

^a BOOZ ALLEN HAMILTON   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTRIBUTE BASED ACCESS CONTROL (ABAC); SERVICE ORIENTED ARCHITECTURES (SOA); SYSTEM-TO-SYSTEM INTERFACES; WEB SERVICES;

COMPUTER ARCHITECTURE; DISTRIBUTED COMPUTER SYSTEMS; INFORMATION DISSEMINATION; INTERFACES (COMPUTER); SECURITY OF DATA;

TELECOMMUNICATION SERVICES;

EID: 33749080076     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2005.25     Document Type: Conference Paper

References (17)

1. OASIS, The Security Assertions Markup Language (SAML) OASIS TC Homepage, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security
2. OASIS, The XML Access Control Markup Language (XACML) OASIS TC Homepage, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml
3. OASIS, Web Services Security (WSS) OASIS TC Homepage, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wss
4. National Computer Security Center (NCSC), "Glossary of Computer Security Terms" (NCSC-TG-004), October 21, 1988, http://csrc.nist.gov/ secpubs/rainbow/tg004.txt
5. D.E. Bell and L.J. LaPadula, "Secure Computer Systems: Mathematical Foundations and Model", Mitre Corp. Report No. M74-244, Bedford, MA, 1975
6. William Stallings, Network and Internetwork Security: Principles and Practice, Prentice Hall, 1995
7. Ravi S. Sandhu, "Lattice-Based Access Control Models", IEEE Computer, November 1993, pp. 9-19
8. Ravi S. Sandhu et al., "Role-Based Access Control Models", IEEE Computer, February 1996, pp. 38-47
9. Rick Kuhn et al., "Information Technology - Role Based Access Control", ANSI Standard, Document Number: ANSI/INCITS 359-2004, Feb. 03, 2004
10. Mohammad A. Al-Kahtani and Ravi Sandhu, "Induced role hierarchies with attribute-based RBAC", SACMAT '03: Proceedings of the eighth ACM symposium on Access control models and technologies, ACM Press, Como, Italy, 2003, pp. 142-148
11. J. F. Barkley, K. Beznosov, and J. Uppal, "Supporting Relationships in Access Control Using Role Based Access Control", ACM Workshop on Role-Based Access Control, ACM Press, 1999, pp. 55-65
12. W. Johnston, S. Mudumbai, and M. Thompson, "Authorization and Attribute Certificates for Widely Distributed Access Control", Proceedings of the IEEE 7th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, 1998, p. 340
13. M. Thompson, W. Johnson, S. Mudumbai, G. Hoo, K. Jackson, and A. Essiar, "Certificate-based Access Control for Widely Distributed Resources", Proceedings of 8th USENIX UNIX Security Symposium, USENIX Association, Washington D.C., 1999, pp. 215-227
14. G. Ahn and B. Mohan, "Secure Information Sharing Using Role-based Delegation", International Conference on Information Technology: Coding and Computing (ITCC '04) Proceedings, August 2004
15. G. Denker and J. Millen, "Cross-Domain Access Control via PKI", 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02) Proceedings, April 2002
16. R. Bhatti, E. Bertino, and A. Ghafoor, "A Trust-based Context-Aware Access Control Model for Web-Services", IEEE International Conference on Web Services (ICWS'04) Proceedings, March 2004
17. Apache Axis Project Home Page, http://ws.apache.org/axis