New paradigms for access control in open environments

Proceedings of the Fifth IEEE International Symposium on Signal Processing and Information Technology

Volumn 2005, Issue , 2005, Pages 540-545

  Damiani, Ernesto ^a   De Capitani Di Vimercati, Sabrina ^a   Samarati, Pierangela ^a  

^a UNIVERSITY OF MILAN   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL COMPLEXITY; DECISION MAKING; INFORMATION ANALYSIS; INTERNET; SECURITY OF DATA;

ACCESS CONTROL; OPEN ENVIRONMENTS; PERSONAL INFORMATION;

CONTROL SYSTEMS;

EID: 33846986465     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISSPIT.2005.1577155     Document Type: Conference Paper

References (27)

1. C.A. Ardagna, E. Damiani, S. De Capitani di Vimer-Adrianacati, C. Fugazza, and P. Samarati. Offline expansion of xacml policies based on p3p metadata. In Proc. of the 5th International Conference on Web Engineering, Sydney, Australia, July 2005.
2. C.A. Ardagna, E. Damiani, S. De Capitani di Vimercati, and P. Samarati. Towards privacy-enhanced authorization policies and languages. In Proc. of the 19th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (IFIP), August 2005.
3. P. Bonatti, S. De Capitani di Vimercati, and P. Samarati. An algebra for composing access control policies. A CM Transactions on Information and System Security, 5(1):1-35, February 2002.
4. P. Bonatti and P. Samarati. A unified framework for regulating access and information release on the web. Journal of Computer Security, 10(3):241-272, 2002.
5. J. Camenisch and E. Van Herreweghen. Design and Implementation of the idemix Anonymous Credential System. IBM Zurich Research Laboratory. http://www.zurich.ibm.com/jca/papers/camvan02.pdf.
6. P. Ceravolo, E. Damiani, S. De Capitani di Vimercati, C. Fugazza, and P. Samarati. Advanced metadata for privacy-aware representation of credentials. In Proc. of the International Workshop on Privacy Data Management, Tokyo, Japan, 2005.
7. E. Damiani, S. De Capitani di Vimercati, M. Finetti, S. Paraboschi, P. Samarati, and S. Jajodia. Implementation of a storage mechanism for untrusted DBMSs. In Proc. of the Second International IEEE Security in Storage Workshop, Washington DC, USA, May 2003.
8. E. Damiani, S. De Capitani di Vimercati, C. Fugazza, and P. Samarati. Extending policy languages to the semantic web. In proc. of the International Conference on Web Engineering, Munch, Germany, 2004.
9. E. Damiani, S. De Capitani di Vimercati, S. Jajodia, S. Paraboschi, and P. Samarati. Balancing confidentiality and efficiency in untrusted relational DBMSs. In Proc. of the 10th ACM Conference on Computer and Communications Security, Washington, DC, USA, October 27-31 2003.
10. E. Damiani, S. De Capitani di Vimercati, and P. Samarati. Managing multiple and dependable identities. IEEE Internet Computing, 7(6):29-37, November/December 2003.
11. J. Davies, D. Fensel, and F. van Harmelen. Towards the Semantic Web: Ontology-Driven Knowledge Management. John Wiley & Sons, Ltd, 2002.
12. S. De Capitani di Vimercati, P. Samarati, and S. Jajodia. Policies, models, and languages for access control. In Proc. of the Workshop on Databases in Networked Information Systems, University of Aizu, Japan, March 2005.
13. H. Hacigümüs, B. Iyer, and S. Mehrotra. Providing database as a service. In Proc. of 18th International Conference on Data Engineering, San Jose, California, USA, February 2002.
14. H. Hacigümüs, B. Iyer, and S. Mehrotra. Ensuring integrity of encrypted databases in database as a service model. In Proc. of the IFIP Conference on Data and Applications Security, Estes Park Colorado, August 2003.
15. H. Hacigümüs, B. Iyer, S. Mehrotra, and C. Li. Executing SQL over encrypted data in the database-service-provider model. In Proc. of the ACM SIGMOD'2002, Madison, Wisconsin, USA, June 2002.
16. IBM Zurich Research Laboratory. Idemix anonymous credential system. http://www.zurich.ibm.com/security/idemix.
17. Privacy and identity management for europe (prime). European RTD Integrated Project. http://www.prime-pro ject.eu.org/.
18. Public key infrastructure (pki). National Institute of Standards and Technology, http://csrc.nist.gov/pki/.
19. L. Wang, D. Wijesekera, and S. Jajodia. A logic-based framework for attribute based access control. In Proceedings of the 2004 ACM Workshop on Formal Methods in Security Engineering, Washington DC, USA, October 2004.
20. D. Wijesekera and S. Jajodia. A propositional policy algebra for access control. ACM Transactions on Information and System Security, 6(2):286-325, May 2003.
21. World Wide Web Consourtium. RDF Vocabulary Description Language (RDFS). http://www.w3.org/TR/rdf-schema/.
22. World Wide Web Consourtium. Semantic Web. http://www.w3.org/2001/ sw/.
23. World Wide Web Consourtium. Web Ontology Language (OWL). http://www.w3.org/2004/OWL/.
24. T. Yu, N. Li, and A. Anton. A formal semantics for p3p. In Proc. of the A CM Workshop on Secure Web Services, Washingthon, DC, USA, October 2004.
25. T. Yu, M. Winslett, and K.E. Seamons. Prunes: Am efficient and complete strategy for automated trust negotiation over the internet. In Proc. of the 7th ACM Conference on Computer and Communications Security, Athens, Greece, November 2000.
26. T. Yu, M. Winslett, and K.E. Seamons. Interoperable strategies in automated trust negotiation. In Proc. of the 8th ACM Conference on Computer and Communications Security, Philadelphia, PA, USA, November 2001.
27. T. Yu, M. Winslett, and K.E. Seamons. Supporting structured credentials and sensistive policies trough interoperable strategies for automated trust. A CM Transactions on Information and System Security (TISSEC), 6(1):1-42, 2003.