XML-based access control languages

Information Security Technical Report

Volumn 9, Issue 3, 2004, Pages 35-46

  Ardagna, C A ^a   Damiani, E ^a   De Capitani, S ^a   Di Vimercati, ^a   Samarati, P ^a  

^a UNIVERSITY OF MILAN   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL COMPLEXITY; DISTRIBUTED COMPUTER SYSTEMS; FORMAL LANGUAGES; INFORMATION MANAGEMENT; INTERNET; SECURITY OF DATA; SEMANTICS; WORLD WIDE WEB;

ACCESS CONTROL LANGUAGES; ACCESS CONTROL SYSTEMS; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGE (XACML); NETWORK SECURITY ADMINISTRATORS;

XML;

EID: 4544358657     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1363-4127(04)00030-5     Document Type: Article

References (22)

1. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu. An XPath-based preference language for P3P, In Proc. of the World Wide Web Conference, Budapest, Hungary, May 2003.
2. C. Ardagna and S. De Capitani dl Vimercati. A comparison of modeling strategies in defining xml-based access control languages. CSSE, 2004.
3. P. Ashley, S. Hada, G. Karjoth, C. Powers, and M. Schunter. Enterprise privacy authorization language (epal 1.1). IBM Research Report, http://www.zurich.ibm.com/securlty/enterpriseprivacy/epal.
4. B. Atkinson and G. Della-Libera et al. Web services security (WS-Security). http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws- security.asp%, April 2002.
5. P. Bonatti and P. Samarati. A unified framework for regulating access and information release on the web. Journal of Computer Security, 10(3):241-272, 2002.
6. D. Box et al. Web services policy assertions language (WS-PolicyAssertions) version 1.1. http://msdn.microsoft.com/library/en-us/ dnglobspec/html/ws-policyassert%ions.asp, May 2003.
7. D. Box et al. Web Services Policy Attachment (WS-PolicyAttachment) version 1.1. http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws- policyattach%ment.asp, May 2003.
8. D. Box et al. Web services policy framework (WS-Policy] version 1.1. http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws-policy.asp, May 2003.
9. E. Damiani, S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Securing SOAP E-services. International Journal of Information Security (IJIS), 1(2):100-115, February 2002.
10. E. Damiani, S. De Capitani di Vimercati, and P. Samarati. Towards security XML web services. In Proc. of the 2002 ACM Workshop on XML Security, Washington, DC, USA, November 2002.
11. S. De Capitani di Vimercati, S. Paraboschi, and P. Samarati. Access control: Principles and solutions. Software - Practice and -¿- Experience, 33(5)397-421, April 2003.
12. S. Feldman. The Changing Face of E-Commerce. IEEE Internet Computing, 4(3):82-84, May/June 2000.
13. B. Galbraith, W. Hankinson, A. Hiotis, M. Janakiraman, D. Prasad, and R. Trived. Professional Web Services Security. Wrox Press Ltd., December 2002.
14. J. Hine, W. Yao, J. Bacon, and K. Moody. An architecture for distributed OASIS services. In Proc. of the IFIP/ACM International Conference on Distributed Systems Platforms nd Open Distributed Processing, Hudson River Valley, New York, USA, April 2000.
15. S. Jajodia, P. Samarati, M. Sapino, and V. Subrahmanian. Flexible support for multiple access control policies. ACM Transactions on Database Systems, 26(2):18-28, June 2001.
16. H. Koshutanski and F. Massacci. An access control framework for business processes for web services. In Proc. of the 2003 ACM Workshop on XML security, Fairfax, Virginia, November 2003.
17. OASIS extensible Access Control Markup Language (XACML) version 1.1. http://www.oasisopen.org/committees/xacml/repository/cs-xacml-specific%ation-1. 1.pdf.
18. P. Samarati and S. De Capitani di Vimercati. Access control: Policies, models, and mechanisms. In R. Focardi and R. Corrierl, editors, Foundations of Security Analysis and Design, LNCS 2171. Springer-Verlag, 2001.
19. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role-based access control models. IEEE Computer, 29(2)38-47, February 1996.
20. Security assertion markup language (SAML) v1.0.http://www.oasisopen.org/ committees/download.php/3400/oasis-sstc-saml-1.1-pdf-xsd.zip.
21. SUN. Introduction to XACML, June 2003. http://sunxacml.sourceforge.net.
22. Web services security policy (WS-SecurityPolicy), December 2002. http://www-106.ibm.com/developerworks/library/ws-secpol/.