A formal comparison of the Bell & LaPadula and RBAC models

Proceedings - The 4th International Symposium on Information Assurance and Security, IAS 2008

Volumn , Issue , 2008, Pages 3-8

  Habib, Lionel ^a   Jaume, Mathieu ^a   Morisset, Charles ^b  

^a SORBONNE UNIVERSITÉ   (France)

^b UNITED NATIONS UNIVERSITY   (Macao)

Author keywords

[No Author keywords available]

Indexed keywords

BELLS; SECURITY SYSTEMS;

ACCESS CONTROL MODELS; RBAC MODELS;

ACCESS CONTROL;

EID: 55349128227     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAS.2008.18     Document Type: Conference Paper

References (25)

1. J. Barkley. Comparing simple role based access control models and access control lists. In ACM Workshop on Role-Based Access Control, pages 127-132, 1997.
2. D. Bell and L. LaPadula. Secure Computer Systems: a Mathematical Model. Technical Report MTR-2547 (Vol. II), MITRE Corp., Bedford, MA, May 1973.
3. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proc. of the 17th IEEE Computer Society Symposium on Research in Security and Privacy, 1996.
4. D. F. C. Brewer and M. J. Nash. The Chinese wall security policy. In Proc. IEEE Symposium on Security and Privacy, pages 206-214, 1989.
5. A. Chander, J. Mitchell, and D. Dean. A state-transition model of trust management and access control. In Proc. of the 14th IEEE Computer Security Foundations Workshop CSFW, pages 27-43. IEEE Computer Society Press, 2001.
6. D. F. Ferraiolo and D. R. Kuhn. Role-based access control. In Proceedings of the 15th National Computer Security Conference, 1992.
7. E. Gureghian, T. Hardin, and M. Jaume. A full formalisation of the Bell and Lapadula security model. Technical Report 2003-007, Univ. Paris 6, LIP6, 2003.
8. L. Habib. Formalisation, comparaison et implantation d'un modèle de contrôle d'accès à base de rôles. Master's thesis, UPMC, Paris, France, 2007.
9. M. Harrison, W. Ruzzo, and J. Ullman. Protection in operating systems. Communications of the ACM, 19:461-471, 1976.
10. M. Jaume and C. Morisset. Formalisation and implementation of access control models. In ITCC - IAS'05, pages 703-708. IEEE CS Press, 2005.
11. M. Jaume and C. Morisset. A formal approach to implement access control. Journal of Information Assurance and Security, 2:137-148, 2006.
12. M. Jaume and C. Morisset. Towards a formal specification of access control. In Workshop FCS-ARSPA'06, pages 213-232, 2006.
13. M. Jaume and C. Morisset. On specifying, implementing and comparing access control models. A Semantical Framework. Technical report, Univ. Paris 6, LIP6, 2007.
14. B. Lampson. Protection. Operating Systems Review, 8(1):18-24, Jan. 1974.
15. L. LaPadula and D. Bell. Secure Computer Systems: A Mathematical Model. Journal of Computer Security, 4:239-263, 1996.
16. H. Levy. Capability-Based Computer Systems. Digital Press, Bedford, MA, 1984.
17. McLean. The algebra of security. In Proc. IEEE Symposium on Security and Privacy, pages 2-7. IEEE Computer Society Press, 1988.
18. C. Morisset. Sémantique des systèmes de contrôle d'accès. PhD thesis, Université Pierre et Marie Curie - Paris 6, 2007.
19. M. Nyanchama and S. L. Osborn. Modeling mandatory access control in role-based security systems. In DBSec, pages 129-144, 1995.
20. S. L. Osborn, R. S. Sandhu, and Q. Munawer. Configuring role-based access control to enforce mandatory and discretionary access control policies. ACM Transactions on Information and System Security, 3(2):85-106, 2000.
21. F. project. Focal, version 0.2 Tutorial and reference manual. LIP6 - INRIA - CNAM, sept 2004. Distribution available at: http://focal.inria.fr.
22. R. S. Sandhu. A lattice interpretation of the Chinese wall policy. In Proc. 15th NIST-NCSC National Computer Security Conference, pages 329-339, 1992.
23. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, 1996.
24. M. Tripunitara and N. Li. Comparing the expressive power of access control models. In 11th ACM Conf. on Computer and Communications Security. ACM SIGSAC, 2004.
25. M. Tschantz and S. Krishnamurthi. Towards reasonability properties for access-control policy languages. In D. Ferraiolo and I. Ray, editors, Proceedings of SACMAT 2006, pages 160-169. ACM, 2006.