A posteriori compliance control

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2007, Pages 11-20

  Etalle, Sandro ^a   Winsborough, William H ^b  

^a UNIVERSITY OF TWENTE   (Netherlands)

^b UNIVERSITY OF TEXAS AT SAN ANTONIO   (United States)

Author keywords

Access control; Policy enforcement; Trust management

Indexed keywords

ACCESS CONTROL; DATA STRUCTURES; HIGH LEVEL LANGUAGES; LOGIC PROGRAMMING; OBJECT ORIENTED PROGRAMMING;

POLICY ENFORCEMENT; TRUST MANAGEMENT;

INFORMATION MANAGEMENT;

EID: 34548026791     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1266840.1266843     Document Type: Conference Paper

References (25)

1. European consumer centre. http://www.euroconsumatori.org/ 16856v16856d24338.html.
2. M. Abadi. Logic in access control. In 8th IEEE Symposium on Logic in Computer Science (LICS), pages 228-233. IEEE Computer Society Press, 2003.
3. A. W. Appel and E. W. Felten. Proof-carrying authentication. In G. Tsudik, editor, Proc of the 6th Conference on Computer and Communications Security. ACM Press, 1999.
4. M. Y. Becker and P. Sewell. Cassandra: flexible trust management, applied to electronic health records. In IEEE Computer Security Foundations Workshop (CSFW), pages 139-154. IEEE Computer Society Press, 2004.
5. E. Bertino, B. Catania, E. Ferrari, and P. Perlasca. A logical framework for reasoning about access control models. ACM Transactions on Information and System Security (TISSEC), pages 71-127, 2003.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The KeyNote trust-management system, version 2. IETF RFC 2704, September 1999.
7. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In IEEE Computer Society Press, editor, Proc. 1996 IEEE Symposium on Security and Privacy, pages 164-173, 1996.
8. J. Cederquist, R. Corin, M. A. C. Dekker, S. Etalle, and J. I. den Hartog. An audit logic for accountability. In A. Sahai and W. Winsborough, editors, 6th Int. Workshop on Policies for Distributed Systems & Networks (POLICY), pages 34-43. IEEE Computer Society Press, 2005.
9. D. Clarke, J-E. Elien, C. Ellison, M. Fredette, A. Morcos, and R. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
10. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. SPKI certificate theory. IETF RFC 2693, September 1999.
11. C. Gunter and T. Jim. Policy-directed certificate retrieval. Software: Practice & Experience, 30(15):1609-1640, September 2000.
12. C. Gunter, S. Weeks, and A. Wright. Models and languages for digital rights. In Proceedings of the 84th Annual Hawaii International Conference on System Sciences (HICSS-34), pages 4034-4038. IEEE Computer Society Press, 2001.
13. H. Guo. Digital rights management (DRM) using XrML. In T-110.501 Seminar on Network Security 2001, page Poster paper 4, 2001.
14. R. Iannella. Open digital rights management. DRM Workshop, Position Paper 23, 2001. http://www.w3.org/2000/12/drm-ws/pp/.
15. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino. A unified framework for enforcing multiple access control policies. In J. Peckham, editor, Proc. International Conference on Management of Data (SIGMOD), pages 474-485. ACM Press, 1997.
16. T. Jim. SD3: A trust management system with certified evaluation. In IEEE Symposium on Security and Privacy, pages 106-115. IEEE Computer Society Press, 2001.
17. N. Li, B. Grosof, and J. Feigenbaum. Delegation logic: A logic-based approach to distributed authorization. ACM Trans. Information System Security, 6(1):128-171, 2003.
18. N. Li, J. Mitchell, and W. Winsborough. Design of a role-based trust-management framework. In IEEE Symposium on Research in Security and Privacy, pages 114-130. IEEE Computer Society Press, 2002.
19. N. Li, W. Winsborough, and J. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, 2003.
20. J. Park and R. Sandhu. Originator control in usage control. In IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY), pages 60-66. IEEE Computer Society Press, 2002.
21. J. Park and R. Sandhu. Towards usage control models: Beyond traditional access control. In ACM Symposium on Access Control Models and Technologies (SACMAT), pages 57-64. ACM Press, 2002.
22. R. Rivest and B. Lampson. SDSI - a simple distributed security infrastructure, 1996. http://theory.lcs.mit.edu/~rivest/sdsi11.html.
23. R. Sandhu and P. Samarati. Access control: Principles and practice. IEEE Communications Magazine, 32(9):40-48, 1994.
24. X. Wang, G. Lao, T. De Martini, H. Reddy, M. Nguyen, and E. Valenzuela. XrML: extensible rights markup language. In M. Kudo, editor, Proc. 2002 ACM workshop on XML security (XMLSEC-02), pages 71-79. ACM Press, 2002.
25. S. Weeks. Understanding trust management systems. In IEEE Symposium on Security and Privacy, pages 94-105. IEEE Computer Society Press, 2001.