Automated trust negotiation in attribute-based access control

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2003

Volumn 2, Issue , 2003, Pages 252-257

  Winsborough, W H ^a   Jacobs, J ^b  

^a Network Associates Laboratories   (United States)

^b NAI Labs   (United States)

Author keywords

Access control

Indexed keywords

COMPUTATIONAL LINGUISTICS; INFORMATION SYSTEMS;

ACCESS CONTROL POLICIES; ATTRIBUTE BASED ACCESS CONTROL; AUTOMATED TRUST NEGOTIATIONS; BUSINESS TRANSACTION; PROTECT INFORMATION; REPRESENTATION LANGUAGES; SENSITIVE ATTRIBUTE; SIMPLIFYING ASSUMPTIONS;

ACCESS CONTROL;

EID: 38949203791     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2003.1194974     Document Type: Conference Paper

References (14)

1. Matt Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. The KeyNote trust-management system, version 2. IETF RFC 2704, September 1999.
2. Piero Bonatti and Pierangela Samarati. Regulating service access and information release on the web. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7), pages 134-143. ACM Press, November 2000.
3. Dwaine Clarke, Jean-Emile Elien, Carl Ellison, Matt Fredette, Alexander Morcos, and Ronald L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
4. Carl Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian Thomas, and Tatu Ylonen. SPKI certificate theory. IETF RFC 2693, September 1999.
5. Amir Herzberg, Yosi Mass, Joris Mihaeli, Dalit Naor, and Yiftach Ravid. Access control meets public key infrastructure, or: Assigning roles to strangers. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, pages 2-14. IEEE Computer Society Press, May 2000.
6. Ninghui Li, John C. Mitchell, andWilliam H. Winsborough. Design of a role-based trust management framework.In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
7. Ninghui Li, William H. Winsborough, and John C. Mitchell. Distributed credential chain discovery in trust management. To appear in Journal of Computer Security. Extended abstract appeared in Proceedings of the Eighth ACM Conference on Computer and Communications Security (CCS-8).
8. Kent E. Seamons, Marianne Winslett, and Ting Yu. Limiting the disclosure of access control policies during automated trust negotiation. In Proceedings of the Symposium on Network and Distributed System Security (NDSS'01), February 2001.
9. Kent E. Seamons, Marianne Winslett, Ting Yu, Lina Yu, and Ryan Jarvis. Protecting privacy during online trust negotiation. In2nd Workshop on Privacy Enhancing Technologies. Springer-Verlag, April 2002.
10. William H. Winsborough and Ninghui Li. Protecting sensitive attributes in automated trust negotiation. InWorkshop on Privacy in the Electronic Society. ACM Press, November 2002.
11. William H. Winsborough and Ninghui Li. Towards practical automated trust negotiation. In Proceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002), pages 92-103. IEEE Computer Society Press, June 2002.
12. William H. Winsborough, Kent E. Seamons, and Vicki E. Jones. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, volume I, pages 88-102. IEEE Press, January 2000.
13. Ting Yu, Xiaosong Ma, and Marianne Winslett. Prunes: An efficient and complete strategy for trust negotiation over the internet. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7), pages 210-219, November 2000.
14. Ting Yu, Marianne Winslett, and Kent E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Transactions on Information and System Security (TISSEC), to appear. Extended abstract appeared in Proceedings of the Eight ACM Conference on Computer and Communications Security (CCS-8).