Specification and verification of constraints in role based access control

Proceedings of the Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, WETICE

Volumn 2003-January, Issue , 2003, Pages 190-195

  Kolaczek G ^a  

^a WROCLAW UNIVERSITY OF TECHNOLOGY   (Poland)

Author keywords

Access control; Automatic control; Automation; Computer languages; Information management; Logic; Management information systems; Paper technology; Protection; Security

Indexed keywords

AUTOMATION; COMPUTATIONAL LINGUISTICS; COMPUTER CONTROL SYSTEMS; COMPUTER PROGRAMMING LANGUAGES; CONTROL; INFORMATION MANAGEMENT; MANAGEMENT INFORMATION SYSTEMS; PROLOG (PROGRAMMING LANGUAGE);

AUTOMATION OF PROCESS; ENTERPRISE MANAGEMENT; LOGIC; PAPER TECHNOLOGY; PROTECTION; ROLE-BASED ACCESS CONTROL; SECURITY; SPECIFICATION AND VERIFICATION;

ACCESS CONTROL;

EID: 46649102581     PISSN: 15244547     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ENABL.2003.1231406     Document Type: Conference Paper

References (18)

1. J. Barkley, A. Cincotta, D. Ferraiolo, S. Gavrilla, R. Kuhn,: "Role based Access Control for the World Wide Web" Proc. NIST-NSA Nat. Computer Security Conf., Baltimore, 1997, pp. 23-34.
2. L. Bolc, K. Dziewicki, P. Rychlik, A. Szałas, Reasoning in non-classical logic. Theoretical basis, Akademicka Oficyna Wydawnicza PLJ, Warsaw, 1995.
3. L. Bolc, K. Dziewicki, P. Rychlik, A. Szałas, Reasoning in non-classical logic. Reasoning automation, Akademicka Oficyna Wydawnicza PLJ, Warsaw, 1998.
4. F. Chen, R.S. Sandhu, "Constraints for Role-Based Access Control", Proc. ACM Workshop on RBAC, Gaithersburg, 1996, pp. 382-390.
5. D.E. Denning, Cryptography and Data Security, Addison-Wesley Publishing, Massachusetts, 1982.
6. D. Ferraiolo, F. Barkley, "Specifying and Managing Role-Based Access Control within a Corporate Intranet", Proc. ACM Workshop on RBAC, Gaithersburg, 1997, pp. 69-78.
7. G. Kołaczek, Model of Role Based Access Control mechanism, Ph.D. thesis, Technical University of Wrocław, Wrocław, Poland, 2001.
8. E. Mally, Grundgesetze des Sollens. Elemente der Logik des Willens, Leuschner & Lubensky, Graz, 1926.
9. NCSC, Trusted Computer Security Evaluation Criteria, National Computer Security Centre, USA, 1985.
10. R. Sandhu, "Lattice-based enforcement of chinese walls", Computers & Security, 1992, Vol.. 11 No.8, pp. 753-763.
11. R. Sandhu, "Role hierarchies and constraints for lattice-based access controls", Proc. 4th Europ. Symp. Research in Computer Security, Rome, Italy, 1996, pp. 20-25.
12. R. Sandhu, "Rationale for the RBAC96 family of access control models" , Proc. ACM Workshop on RBAC, Gaithersburg, 1997, pp. 32-38.
13. R. Sandhu, "Role activation hierarchies", Proc. ACM Workshop on RBAC, Fairfax, 1998, pp. 56-65.
14. R Sandhu, V. Bhamidipati, E. Coyne, S. Ganta, Ch. Youman, "The ARBAC97 model for role-based administration of roles: preliminary description and outline", Proc. ACM Workshop on RBAC, Fairfax, 1997, pp. 41-50.
15. R Sandhu, V. Bhamidipati, Q. Munawer, "The ARBAC97 model for role-based administration of roles", ACM Trans. on Inf. Syst. Sec., 1999, Vol. 2 No.1, pp.105-135.
16. R. Sandhu, E. J. Coyne, H. L. Feinstein, Ch. E. Youman, "Role-based access control: A multi-dimensional view", Proc. 10th Annual Computer Security Application Conf., Greater Orlando, 1994, pp. 54-62.
17. R. Shirey, "Request for Comments 2828", The Internet Society, available at http://www.rfc-editor.org/rfc.html
18. G.H. von Wright, "Deontic Logic",. Mind 60, 1951 No. 237, pp. 1-15.