Using attribute-based access control to enable attribute-based messaging

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 403-413

  Bobba, Rakesh ^a,b   Fatemieh, Omid ^a,c   Khan, Fariba ^a,c   Gunter, Carl A ^a,c   Khurana, Himanshu ^a,b  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b National Center for Super Computing Applications (NCSA) Gunter

^c Computer Science Department ^*

Author keywords

[No Author keywords available]

Indexed keywords

ATTRIBUTE BASED MESSAGING (ABM); TARGETED MESSAGING; XACML;

DATA PRIVACY; DATABASE SYSTEMS; MESSAGE PASSING;

ACCESS CONTROL;

EID: 39049153474     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.53     Document Type: Conference Paper

References (20)

1. R. N. Afandi, J. Zhang, and C. A. Gunter. AMPol-Q: Adaptive Middleware Policy to Support QoS. In International Conference on Service Oriented Computing(ICSOC), Chicago, IL, December 2006.
2. R. N. Afandi, J. Zhang, M. Hafiz, and C. A. Gunter. AMPol: Adaptive Messaging Policy. In European Conference on Web Services(ECOWS '06), Zurich, Switzerland, December 2006. EEE.
3. XACML references. Technical Report v 1.54, OASIS, May 2005.
4. N. Bieberstein, R. Shah, K. Jones, S. Bose, and M. Fiammante. Service-Oriented Architecture COMPASS: Business Value, Planning, and Enterprise Roadmap. Pearson Education, 2005.
5. P. A. Bonatti and P. Samarati. A uniform framework for regulating service access and information release on the web. J. Comput. Secur., 10(3):241-271, 2002.
6. K. Borders, X. Zhao, and A. Prakash. CPOL: high-performance policy evaluation. In CCS '05: 12th ACM Conference on Computer and Communications Security, Virginia, pages 147-157. ACM Press, 2005.
7. D. Chadwick, G. Lunt, and G. Zhao. Secure Role-based Messaging. In CMS '04: Eighth IFIP TC-6 TC-11 Conference on Communications and Multimedia Security, Windermere, UK, pages 263-275, 2004.
8. E. Damiani, S. D. C. di Vimercati, and P. Samarati. New Paradigms for Access Control in Open Environments. In 5th IEEE International Symposium on Signal Processing and Information, Athens, December 2005.
9. D. Ferraiolo, D. Kuhn, and R.Chandramouli. Role Based Access Control. Artech House, 2003.
10. eXtensible Access Control Markup Language (XACML). Technical Report v1.1, OASIS, August 2003.
11. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust management framework. In IEEE Symposium on Security and Privacy, Oakland, May 2002.
12. Y. Li, H. Yang, and H. Jagadish. Nalix: an interactive natural language interface for querying xml. In ACM SIGMOD International Conference on Management of Data (SIGMOD 2005), Baltimore MD, June 2005.
13. Y. Li, H. Yang, and H. Jagadish. Constructing a generic natural language interface for an xml database. In International Conference on Extending Database Technology (EDBT 2006), Munich Germany, March 2006.
14. M. Lorch, S. Proctor, R. Lepro, D. Kafura, and S. Shah. First experiences using XACML for access control in distributed systems. In XMLSEC '03: ACM workshop on XML security, Virginia, pages 25-37. ACM, 2003.
15. K. D. Lux, M. J. May, N. L. Bhattad, and C. A. Gunter. WSEmail: Secure internet messaging based on web services. In International Conference on Web Services (ICWS '05), Orlando FL, July 2005. IEEE.
16. M. C. Mont, P. Bramhall, and K. Harrison. A Flexible Role-based Secure Messaging Service: Exploiting IBE Technology for Privacy in Health Care. In DEXA '03: 14th International Workshop on Database and Expert Systems Applications, page 432. IEEE, 2003.
17. L. Wang, D. Wijesekera, and S. Jajodia. A logic-based framework for attribute based access control. In FMSE '04: ACM workshop on Formal methods in security engineering, Washington DC, pages 45-55. ACM, 2004.
18. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Trans. Inf. Syst. Secur., 6(1):1-42, 2003.
19. E. Yuan and J. Tong. Attributed Based Access Control (ABAC) for Web Services. In ICWS'05: IEEE International Conference on Web Services, Orlando, page 569. IEEE, July 2005.
20. N. Yuhanna, M. Gilpin, L. Hogan, and A. Sahalie. Information fabric: Enterprise data virtualization. White Paper, Forrester Research Inc., January 2006.