Beyond separation of duty: An algebra for specifying high-level security policies

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2006, Pages 356-369

  Li, Ninghui ^a   Wang, Qihua ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

Access control; Category; Policy design; Separation of duty

Indexed keywords

POLICY DESIGN; SEPARATION OF DUTY;

BOOLEAN ALGEBRA; COMPUTATIONAL COMPLEXITY; COMPUTER PRIVACY; PROBLEM SOLVING; REQUIREMENTS ENGINEERING; USER INTERFACES;

ACCESS CONTROL;

EID: 34547294402     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180405.1180449     Document Type: Conference Paper

References (24)

1. G.-J. Ahn and R. S. Sandhu. The RSL99 language for role-based separation of duty constraints. In Proceedings of the 4th Workshop on Role-Based Access Control, pages 43-54, 1999.
2. G.-J. Ahn and R. S. Sandhu. Role-based authorization constraints specification. ACM Transactions on Information and System Security, 3(4):207-226, Nov. 2000.
3. V. Atluri and W. Huang. An authorization model for workflows. In Proceedings of the 4th European Symposium on Research in Computer Security (ESORICS), pages 44-64, 1996.
4. E. Bertino, E. Ferrari, and. V. Atluri. The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security, 2(1):65-104, Feb. 1999.
5. P. Bonatti, S. de Capitani di Vimercati, and P. Samarati. A modular approach to composing access control policies. In Proceedings of the 7th ACM conference on Computer and Communications Security (CCS), pages 164-173, Nov. 2000.
6. P. Bonatti, S. de Capitani di Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Transactions on Information and System Security (TISSEC), 5(1): 1-35, Feb. 2002.
7. D. D. Clark and D. R. Wilson. A comparision of commercial and military computer security policies. In Proceedings of the 1987 IEEE Symposium on Security and Privacy, pages 184-194. IEEE Computer Society Press, May 1987.
8. J. Crampton. Specifying and enforcing constraints in role-based access control. In Proceedings of the Eighth ACM Symposium on Access Control Models and Technologies (SACMAT 2003), pages 43-50, Como, Italy, June 2003.
9. M. R. Garey and D. J. Johnson. Computers And Intractability: A Guide to the Theory of NP-Completeness. W.H. Freeman and Company, 1979.
10. V. D. Gligor, S. I. Gavrila, and D. F. Ferraiolo. On the formal definition of separation-of-duty policies and their composition. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 172-183, May 1998.
11. T. Jaeger. On the increasing importance of constraints. In Proceedings of ACM Workshop on Role-Based Access Control, pages 33-42, 1999.
12. T. Jaeger and J. E. Tidswell. Practical safety in flexible access control models. ACM Transactions on Information and System Security, 4(2):158-190, May 2001.
13. N. Li, Z. Bizri, and M. V. Tripunitara. On mutually-exclusive roles and separation of duty. In Proceedings of the 11th ACM Conference on Computer and Communications Security (CCS-U), pages 42-51. ACM Press, Oct. 2004.
14. N. Li, J. C. Mitchell, and. W. H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
15. J. McLean. The algebra of security. In Proceedings of IEEE Symposium on Security and Privacy, pages 2-7, Apr. 1988.
16. M. J. Nash and K. R. Poland, Some conundrums concerning separation of duty. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 201-209, May 1990.
17. J. Pincus and J. M. Wing. Towards an algebra for security policies (extended abstract). In Proceedings of ICATPN 2005, number 3536 in LNCS, pages 17-25. Springer, 2005.
18. J. H. Saltzer and. M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9): 1278-1308, September 1975.
19. R. Sandhu. Separation of duties in computerized information systems. In Proceedings of the IFIP WG11.3 Workshop on Database Security, Sept. 1990.
20. R. S. Sandhu. Transaction control expressions for separation of duties. In Proceedings of the Fourth Annual Computer Security Applications Conference (ACSAC88), Dec. 1988.
21. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
22. T. T. Simon and M. E. Zurko. Separation of duty in role-based environments. In Proceedings of The 10th Computer Security Foundations Workshop, pages 183-194. IEEE Computer Society Press, June 1997.
23. J. Tidswell and T. Jaeger. An access control model for simplifying constraint expression. In Proceedings of ACM Conference on Computer and Communications Security, pages 154-163, 2000.
24. D. Wijesekera and S. Jajodia. A propositional policy algebra for access control. ACM Transactions on Information and Systems Security (TISSEC), 6(2):286-325, May 2003.