A formal framework to elicit roles with business meaning in RBAC systems

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2009, Pages 85-94

  Colantonio, Alessandro ^a   Di Pietro, Roberto ^b   Ocello, Alberto ^a   Verde, Nino Vincenzo ^b  

^a Engiweb Security   (Italy)

^b ROMA TRE UNIVERSITY   (Italy)

Author keywords

Business meaning; RBAC; Role engineering; Role mining; Role based access control

Indexed keywords

ACCESS PERMISSIONS; BUSINESS INFORMATION; BUSINESS MEANING; BUSINESS PERSPECTIVE; BUSINESS PROCESS; COST EFFECTIVE; DE FACTO; FORMAL FRAMEWORK; KEY PROBLEMS; MINING ALGORITHMS; MINING PROCESS; ORGANIZATION STRUCTURES; ORGANIZATIONAL UNITS; ROLE ENGINEERING; ROLE-BASED; ROLE-BASED ACCESS CONTROL;

COST REDUCTION; DATA MINING; EMBEDDED SYSTEMS; MINING; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 70450265318     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1542207.1542223     Document Type: Conference Paper

References (28)

1. American National Standards Institute (ANSI) and InterNational Committee for Information Technology Standards (INCITS). ANSI/INCITS 359-2004, Information Technology - Role Based Access Control, 2004.
2. rd ACM Symposium on Applied Computing, SAC '08, volume 3, pages 2129-2136, Fortaleza, Ceará, Brazil, 2008.
3. rd International Information Security Conference, SEC '08, volume 278 of IFIP International Federation for Information Processing, pages 333-347. Springer, 2008.
4. th International Information Security Conference, SEC '09, volume 297 of IFIP International Federation for Information Processing, pages 259-269. Springer, 2009.
5. th International Information Security Conference, SEC '09, volume 297 of IFIP International Federation for Information Processing, pages 376-386. Springer, 2009.
6. st ACM Workshop on Role-Based Access Control, RBAC '95, pages 15-16, 1995.
7. th International Workshop on Requirements Engineering: Foundation for Software Quality, REFSQ '02, 2002.
8. K. Deb. Multi-Objective Optimization Using Evolutionary Algorithms. John Wiley & Sons, Inc., New York, NY, USA, 2001.
9. th ACM Symposium on Access Control Models and Technologies, SACMAT '08, pages 1-10, 2008.
10. th Annual Computer Security Applications Conference, ACSAC, pages 127-136. IEEE Computer Society, 2001.
11. nd Workshop on Role-Based Access Control, RBAC '97, pages 121-125, 1997.
12. th ACM Conference on Computer and Communications Security, CCS '08, Oct. 2008.
13. th ACM Symposium on Access Control Models and Technologies, SACMAT '02, 2002.
14. th ACM Symposium on Access Control Models and Technologies, SACMAT '03, pages 179-186, 2003.
15. N. Li, J.-W. Byun, and E. Bertino. A critique of the ANSI standard on role-based access control. IEEE Security & Privacy, 5(6):41-49, 2007.
16. th IEEE International Conferene on Data Engineering, ICDE '08, pages 297-306, 2008.
17. th ACM Symposium on Access Control Models and Technologies, SACMAT '08, pages 21-30, 2008.
18. th ACM Symposium on Access Control Models and Technologies, SACMAT '02, pages 33-42, 2002.
19. S. Oh and S. Park. Task-role-based access control model. Information Systems, 28(6):533-562, 2003.
20. S. Oh, R. S. Sandhu, and X. Zhang. An effective role administration model using organization structure. ACM Transactions on Information and System Security, TISSEC, 9(2):113-137, 2006.
21. th ACM Symposium on Access Control Models and Technologies, SACMAT '01, pages 163-169, 2001.
22. th ACM Workshop on Role-Based Access Control, RBAC 2000, pages 103-110, 2000.
23. th ACM Symposium on Access Control Models and Technologies, SACMAT '05, pages 168-176, 2005.
24. th ACM Symposium on Access Control Models and Technologies, SACMAT '03, pages 169-178, 2003.
25. th ACM Symposium on Access Control Models and Technologies, SACMAT '07, pages 175-184, 2007.
26. th ACM Conference on Computer and Communications Security, pages 144-153, 2006.
27. S. Wasserman and K. Faust. Social Network Analysis, chapter 5, pages 169-219. Cambridge University Press, 1994.
28. th ACM Symposium on Access Control Models and Technologies, SACMAT '07, pages 139-144, 2007.