RT: A Role-based Trust-management framework

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2003

Volumn 1, Issue , 2003, Pages 201-212

  Li, Ninghui ^a   Mitchell, J C ^a  

^a Stanford University   (United States)

Author keywords

Engines

Indexed keywords

SEMANTICS;

POLICY LANGUAGE; ROLE-BASED TRUST MANAGEMENTS;

ENGINES;

EID: 62349090353     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2003.1194885     Document Type: Conference Paper

References (25)

1. Martín Abadi, Michael Burrows, Butler Lampson, and Gordon Plotkin. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, October 1993.
2. Andrew W. Appel and Edward W. Felten. Proof-carrying authentication. In Proceedings of 6th ACM Conference on Computer and Communications Security (CCS-6), November 1999.
3. Olav Bandmann and Mads Dam. A note on SPKI's authorization syntax. In Pre-Proceedings of 1st Annual PKI Research Workshop, April 2002. Available from http://www.cs.dartmouth.edu/~pki02/.
4. Lujo Bauer, Michael A. Schneider, and Edward W. Felten. A general and flexible access-control system for the web. In Proceedings of the 11th USENIX Security Symposium, August 2002.
5. Matt Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. The KeyNote trust-management system, version 2. IETF RFC 2704, September 1999.
6. Matt Blaze, Joan Feigenbaum, and Jack Lacy. Decentralized trust management. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 164-173. IEEE Computer Society Press, May 1996.
7. Tim Bray, Dave Hollander, and Andrew Layman. Namespaces in XML. W3C Recommendation, January 1999.
8. Ajay Chander, John C. Mitchell, and Insik Shin. Mobile code security by Java bytecode instrumentation. In DARPA Information Survivability Conference & Exposition (DISCEX II), June 2001.
9. David D. Clark and David R. Wilson. A comparision of commercial and military computer security policies. In Proceedings of the 1987 IEEE Symposium on Security and Privacy, pages 184-194. IEEE Computer Society Press, May 1987.
10. John DeTreville. Binder, a logic-based security language. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 105-113. IEEE Computer Society Press, May 2002.
11. Carl Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian Thomas, and Tatu Ylonen. SPKI certificate theory. IETF RFC 2693, September 1999.
12. Jonathan R. Howell. Naming and sharing resources acroos administrative boundaries. PhD thesis, Dartmouth College, May 2000.
13. Trevor Jim. SD3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 106-115. IEEE Computer Society Press, May 2001.
14. Paris C. Kanellakis, Gabriel M. Kuper, and Peter Z. Revesz. Constraint query languages. Journal of Computer and System Sciences, 51(1):26-52, August 1995. Preliminary version appeared in Proceedings of the 9th ACM Symposium on Principles of Database Systems (PODS), 1990.
15. Gabriel Kuper, Leonid Libkin, and Jan Paredaens, editors. Constraint Databases. Springer, 2000.
16. Butler Lampson, Martín Abadi, Michael Burrows, and Edward Wobber. Authentication in distributed systems: Theory and practice. ACM Transactions on Computer Systems, 10(4):265-310, November 1992.
17. Ninghui Li, Benjamin N. Grosof, and Joan Feigenbaum. Delegation Logic: A logic-based approach to distributed authorization. ACM Transaction on Information and System Security (TISSEC), 6(1), February 2003.
18. Ninghui Li and John C. Mitchell. Datalog with constraints: A foundation for trust management languages. In Proceedings of the Fifth International Symposium on Practical Aspects of Declarative Languages (PADL 2003), pages 58-73. Springer, January 2003.
19. Ninghui Li, John C. Mitchell, and William H. Winsborough. Design of a role-based trust management framework. InProceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
20. Ninghui Li, William H. Winsborough, and John C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, February 2003.
21. Ronald L. Rivest and Bulter Lampson. SDSI - a simple distributed security infrastructure, October 1996. http:/theory.lcs.mit.edu/~rivest/sdsi11.html.
22. Ravi S. Sandhu, Edward J. Coyne, Hal L. Feinstein, and Charles E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
23. Tichard T. Simon and Mary Ellen Zurko. Separation of duty in role-based environments. In Proceedings of The 10th Computer Security Foundations Workshop, pages 183-194. IEEE Computer Society Press, June 1997.
24. William H. Winsborough and Ninghui Li. Protecting sensitive attributes in automated trust negotiation. In Proceedings of ACM Workshop on Privacy in the Electronic Society, November 2002.To appear.
25. William H. Winsborough and Ninghui Li. Towards practical automated trust negotiation. InProceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002), pages 92-103. IEEE Computer Society Press, June 2002.