A theory for comparing the expressive power of access control models

Journal of Computer Security

Volumn 15, Issue 2, 2007, Pages 231-272

  Tripunitara, Mahesh V ^a   Li, Ninghui ^b  

^a MOTOROLA INC   (United States)

^b Purdue University   (United States)

Author keywords

Access control; Access matrix; Discretionary access control; Expressive power; Reduction; Role based access control; State matching reduction; Trust management

Indexed keywords

COMPUTER SIMULATION; DATA REDUCTION; MATRIX ALGEBRA; STATE ASSIGNMENT;

ACCESS MATRIX; DISCRETIONARY ACCESS CONTROL; EXPRESSIVE POWER; ROLE-BASED ACCESS CONTROL; STATE-MATCHING REDUCTION; TRUST MANAGEMENT;

COMPUTER CONTROL;

EID: 33847356528     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2007-15202     Document Type: Article

References (26)

1. P. Ammann, R. Lipton and R.S. Sandhu, The expressive power of multi-parent creation in monotonic access control models, Journal of Computer Security 4(2-3) (1996), 149-165.
2. E. Bertino, B. Catania, E. Ferrari and P. Perlasca, A logical framework for reasoning about access control models, ACM Transactions on Information and System Security 6(1) (2003), 71-127.
3. A. Chander, D. Dean and J.C. Mitchell, A state-transition model of trust management and access control, in: Proceedings of the 14th IEEE Computer Security Foundations Workshop, IEEE Computer Society Press, 2001, pp. 27-43.
4. S. Ganta, Expressive power of access control models based on propagation of rights, PhD thesis, George Mason University, 1996.
5. G.S. Graham and P.J. Denning, Protection - principles and practice, in: Proceedings of the AFIPS Spring Joint Computer Conference, Vol. 40, AFIPS Press, 1972, pp. 417-429.
6. M.A. Harrison, W.L. Ruzzo and J.D. Ullman, Protection in operating systems, Communications of the ACM 19(8) (1976), 461-471.
7. B.W. Lampson, Protection, in: Proceedings of the 5th Princeton Conference on Information Sciences and Systems, 1971.
8. Reprinted in ACM Operating Systems Review 8(1) (1974), 18-24.
9. N. Li and J.C. Mitchell, RT: A role-based trust-management framework, in: The Third DARPA Information Survivability Conference and Exposition (DISCEX III), IEEE Computer Society Press, 2003.
10. N. Li, J.C. Mitchell and W.H. Winsborough, Design of a role-based trust management framework, in: Proceedings of the 2002 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, 2002, pp. 114-130.
11. N. Li, J.C. Mitchell and W.H. Winsborough, Beyond proof-of-compliance: Security analysis in trust management, Journal of the ACM 52(3) (2005), 474-514.
12. Preliminary version appeared in: Proceedings of 2003 IEEE Symposium on Security and Privacy.
13. N. Li and M.V. Tripunitara, On Safety in Discretionary Access Control, in: Proceedings of the 2005 IEEE Symposium on Security and Privacy, 2005.
14. N. Li and M.V. Tripunitara, Security analysis in role-based access control, 2006. Accepted to appear in ACM Transactions on Information and Systems Security (TISSEC).
15. Preliminary version appeared in: Proceedings of the Ninth ACM Symposium on Access Control Models and Technologies (SACMAT 2004).
16. N. Li, W.H. Winsborough and J.C. Mitchell, Distributed credential chain discovery in trust management, Journal of Computer Security 11(1) (2003), 35-86.
17. R. Milner. A Calculus of Communicating Systems, Lecture Notes in Computer Science, Vol. 92, Springer, 1980.
18. Q. Munawer and R.S. Sandhu, Simulation of the augmented typed access matrix model (ATAM) using roles, in : Proceedings of INFOSECU99 International Conference on Information and Security, 1999.
19. S. Osborn, Mandatory access control and role-based access control revisited, in: Proceedings of the Second ACM Workshop on Role-Based Access Control (RBAC'97), 1997, pp. 31-40.
20. S. Osborn, R.S. Sandhu and Q. Munawer, Configuring role-based access control to enforce mandatory and discretionary access control policies, ACM Transactions on Information and System Security 3(2) (2000), 85-106.
21. D. Park, Concurrency and automata on infinite sequences, in: Proceedings of the 5th GI Conference on Theoretical Computer Science, Lecture Notes in Computer Science, Vol. 104, Springer, 1981.
22. R.S. Sandhu, Expressive power of the schematic protection model, Journal of Computer Security 1(1) (1992), 59-98.
23. R.S. Sandhu, V. Bhamidipati and Q. Munawer, The ARBAC97 model for role-based administration of roles. ACM Transactions on Information and Systems Security 2(1) (1999), 105-135.
24. R.S. Sandhu and S. Ganta, On testing for absence of rights in access control models, in: Proceedings of the sixth Computer Security Foundations Workshop, IEEE Computer Society Press, 1993, pp. 109-118.
25. R.S. Sandhu and Q. Munawer, How to do discretionary access control using roles, in: Proceedings of the Third ACM Workshop on Role-Based Access Control (RBAC 1998), 1998, pp. 47-54.
26. M.V. Tripunitara and N. Li, Comparing the expressive power of access control models, in: Proceedings of 11th ACM Conference on Computer and Communications Security (CCS-11), ACM Press, 2004, pp. 62-71.