Access control systems for geospatial data and applications

Spatial Data on the Web: Modeling and Management

Volumn , Issue , 2007, Pages 189-214

  Damiani, Maria Luisa ^a,c   Bertino, Elisa ^b  

^a UNIVERSITY OF MILAN   (Italy)

^b PURDUE UNIVERSITY   (United States)

^c EPFL   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 70349089849     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1007/978-3-540-69878-4_9     Document Type: Chapter

References (24)

1. Atluri V, Mazzoleni P (2002) A Uniform Indexing Scheme for Geospatial Data and Authorizations. In: Proc. 6th Conf., on Data and Application Security, IFIP TC11/WG11.3, Cambridge, UK, 207-218
2. Belussi A, Bertino E, Catania B, Damiani M L, Nucita (2004) An Authorization Model for Geographical Maps. In: Proc. 12th Int., Symp. of ACM GIS, Washington DC, USA, 82-91
3. Bertino E, Ferrari E, Perego A (2002) MaX: An Access Control System for Digital Libraries and the Web. In: Proc. 26th Computer Software and Application Conference, Oxford, UK, 945-950
4. Bertino E, Catania C, Damiani ML, Perlasca P (2005) GEO-RBAC: A Spatially Aware RBAC. In: Proc. 10th ACM Symposium on Access Control Models and Technologies (SACMAT'05), Stockholm, Sweden, 29-37
5. Bertino E, Damiani ML, Momini D (2003) An Access Control System for a Web Map Management Service. In: Proc. 14th International Workshop on Research Issues in Data Engineering (RIDE-WS-ECEG), Boston, USA, 33-39
6. Bertino E, Sandhu R (2005) Database Security-Concepts, Approaches, and Challenges. IEEE Transactions on Dependable and Secure Computing 2(1):2-19
7. Bhatti R, Ghafoor A, Bertino E, Joshi J B D (2005) X-GTRBAC: an XML-Based Policy Specification Framework and Architecture for Enterprise-wide Access Control. ACM Transactions on Information and System Security 8(2):187-227.
8. Bishop M (2005) Introduction to Computer Security. Addison-Wesley
9. Chandran S M, Joshi J B D (2005) LoT RBAC: A Location and Time-based RBAC Model. In: Proc. 6th International Conference on Web Information Systems Engineering (WISE'05), New York, USA, 361-375.
10. Covington M, Long W, Srinivasan S, Dev AK, Ahamad M, Abowd GD (2001) Securing Context-aware Applications Using Environment Roles. In: Proc. 6th ACM Symposium on Access Control Models and Technologies (SACMAT'01), Chantilly, USA, 10-20
11. Damiani ML, Bertino E (2006) Access Control and Privacy in Location-aware Services for Mobile Organizations. In: Proc. of the 7th International Conference on Mobile Data Management, Nara, Japan
12. Damiani ML, Bertino E, Perlasca P (2005) Data Security in Location-Aware Applications: an Approach Based on RBAC. International Journal of Information and Computer Security (IJICS), in press
13. Ferraiolo D, Sandhu R, Gavrila S, Kuhn R, Chandramouli R (2001) Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and System Security 4(2):224-274
14. Ferrari E, Adam NR, Atluri V, Bertino E, Capuozzo U (2002) An Authorization System for Digital Libraries. VLDB Journal 11(1):58-67
15. Hansen F Oleshchuk V (2003) Spatial Role-based Access Control Model for Wireless Networks. In: Proc. IEEE Vehicular Technology Conference VTC2003-Fall, Orlando, FL, USA, 2093-2097
16. ISO/TC211 (2003) 19107: Geographic information - Spatial schema
17. ISO/TC211 (2004) 19136: Geographic information - Geography Markup Language
18. Joshi J B D, Bertino E, Latif U, Ghafoor A (2005) A Generalized Temporal Role-Based Access Control Model. IEEE Transactions on Knowledge and Data Engineering, 17(1):4-23
19. Matheus A (2005) Declaration and Enforcement of Fine-grained Access Restrictions for a Service-based Geospatial Data Infrastructure. In: Proc. 10th ACM Symposium on Access Control Models and Technologies (SACMAT'05), Stockholm, Sweden, 21-28
20. OASIS SAML (2006) http://xml.coverpages.org/saml.html
21. Sandhu R, Ferraiolo D, Kuhn R (2000) The NIST Model for Role-Based Access Control: Towards a Unified Standard. In: Proc. 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, 47-63
22. Sandhu R, Samarati P (1994) Access control: Principles and Practice. IEEE Communications, 32(9):40-48
23. Sandhu R, Coyne EJ, Feinstein HL, Youman CE (1996) Role-Based Access Control Models. IEEE Computer 29(2):38-47
24. Thuraisingham B (1990) Multilevel Security forMultimedia Database Systems. In: Proc. IFIP WG 11.3 Workshop on Database Security (DBSec 1990), Halifax, UK, 99-116