On the security of delegation in access control systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5283 LNCS, Issue , 2008, Pages 317-332

  Wang, Qihua ^a   Li, Ninghui ^a   Chen, Hong ^a  

^a PURDUE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTROL SYSTEMS; SECURITY SYSTEMS;

AUTHORIZATION SYSTEMS; ENFORCEMENT MECHANISMS; POTENTIAL MECHANISM; RESEARCH COMMUNITIES; SECURITY ASPECTS; SECURITY BREACHES; SECURITY POLICY; SEPARATION OF DUTY;

ACCESS CONTROL;

EID: 57049089483     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-88313-5_21     Document Type: Conference Paper

References (16)

1. Atluri, V., Warner, J.: Supporting conditional delegation in secure workflow management systems. In: SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies, pp. 49-58. ACM Press, New York (2005)
2. Barka, E., Sandhu, R.: Framework for role-based delegation models. In: ACSAC 2000: Proceedings of the 16th Annual Computer Security Applications Conference, Washington, DC, USA, p. .168. IEEE Computer Society Press, Los Alamitos (2000)
3. Barka, E., Sandhu, R.: A role-based delegation model and some extensions (2000)
4. Bertino, E., Ferrari, E., Atluri, V.: The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security 2(1), 65-104 (1999)
5. Crampton, J.: A reference monitor for workflow systems with constrained task execution. In: Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies (SACMAT 2005), Stockholm, Sweden, June 2005, pp. 38-47 (2005)
6. Crampton, J., Khambhammettu, H.: Delegation in role-based access control. In: Proceedings of 11th European Symposium on Research in Computer Security (2006)
7. Joshi, J.B.D., Bertino, E.: Fine-grained role-based delegation in presence of the hybrid role hierarchy. In: SACMAT 2006: Proceedings of the eleventh ACM symposium on Access control models and technologies, pp. 81-90. ACM Press, New York (2006)
8. Na, S., Cheon, S.: Role delegation in role-based access control. In: RBAC 2000: Proceedings of the fifth ACM workshop on Role-based access control, pp. 39-44. ACM Press, New York (2000)
9. Schaad, A.: A framework for organisational control principles. Ph.D Thesis, University of York (2003)
10. Tan, K.. Crampton. J., Gunter, C.: The consistency of task-based authorization constraints in workflow systems. In: Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW), pp. 155-169 (2004)
11. Wainer, J., Kumar, A.: A fine-grained, controllable, user-to-user delegation method in rbac. In: SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies, pp. 59-66. ACM Press, New York (2005)
12. Wang, Q.. Li, N.: Satisfiability and resiliency in workflow systems. In: Proc. European Symp. on Research in Computer Security (September 2007)
13. Wang, Q.. Li, N.: On the security of delegation in access control systems. CERIAS Technical Report (July 2008), http://www.cs.purdue.edu/homes/ wangq/papers/delegation.pdf
14. Warner, J., Atluri, V.: Inter-instance authorization constraints for secure workflow management. In: Proc. ACM Symposium on Access Control Models and Technologies (SACMAT). pp. 190-199 (2006)
15. Zhang, L.. Ahn. G.-J.. Chu. B.-T.: A rule-based framework for role-based delegation and revocation. ACM Trans. Inf. Syst. Secur. 6(3), 404-441 (2003)
16. Zhang, X.. Oh. S.. Sandhu. R.: Pbdm: a flexible delegation model in rbac. In: SACMAT 2003: Proceedings of the eighth ACM symposium on Access control models and technologies, pp. 149-157. ACM Press, New York (2003)