Towards session-aware RBAC administration and enforcement with XACML

Proceedings - 2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009

Volumn , Issue , 2009, Pages 9-16

  Xu, Min ^a   Wijesekera, Duminda ^a   Zhang, Xinwen ^b   Cooray, Deshan ^a  

^a George Mason University   (United States)

^b SAMSUNG INFORMATION SYSTEMS AMERICA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROLLERS; ENFORCEMENT MODULES; EXPERIMENTAL STUDIES; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; PERFORMANCE CHARACTERISTICS; RBAC POLICY; REFERENCE IMPLEMENTATION; ROLE-BASED ACCESS CONTROL; USER SESSIONS;

CONCURRENCY CONTROL; MARKUP LANGUAGES; MODEL CHECKING; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 71049167747     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2009.27     Document Type: Conference Paper

References (18)

1. Care and hierarchical role based access control (RBAC) profile of XACML v2.0, http://docs.oasisopen.org/xacml/2.0/access-control-xacml-2.0-rbac-proflle 1-spec-os.pdf.
2. Core specification: extensible access control markup language (XACML), http://www.oasis-open.org/committees/tc-home-php?wg-abbrev=xacml.
3. Java 2 platform standard edition 5.0, http://java.sun.eom/j2se/1.5.0/ docs/api/.
4. Sun's XACML implementation, http://sunxacml.sourceforge.net/.
5. W3c recommendations, http://www.w3c.org/.
6. J. Crampton. Understanding and developing role-based administrative models. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), November 2005.
7. J. Crampton and L. Chen. Implementing RBAC and ABRA using XACML. In submission.
8. J. Crampton and G. Loizou. Administrative scope: A foundation for role-based administrative models. ACM Transactions on Information and Systems Security, 6(2):201-231, 2003.
9. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. Richard Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security, 4(3):224-274, August 2001.
10. H. Janicke, A. Cau, F. Siewe, and H. Zedan. Concurrent enforcement of usage control polices. In Proceedings IEEE Workshop on Policies for Distributed Systems and Networks (Policy), July 2008.
11. M. Haustein, T. Härder, and K. Luttenberger. Contest of XML lock protocols. In VLDB '06: Proceedings of the 32nd international conference on Very large data bases, pages 1069-1080. VLDB Endowment, 2006.
12. H. Korth and A. Silberschatz. Database System Concepts. McGraw-Hill, Inc, 1991.
13. L. Seitz, E. Rissanen, T. Sandholm, B. Sadighi, and O. Mulmo. Policy administration control and delegation using XACML and delegent. In Grid Computing Workshop 2005, 2005.
14. N. Li and Z. Mao. Administration in role based access control. In ACM Symposium on InformAtion, Computer and Communications Security (ASIACCS), March 2007.
15. S. OH, R. Sandhu, and X. Zhang. An effective role administration model using organization structure. ACM Transactions on Information and Systems Security, 9(2): 113-137, 2006.
16. abc usage control model. ACM Transactions on Information and Systems Security, 7(1): 128-174, February 2004.
17. R. Sandhu, V. Bhamidipati, and Q. Munawer. The ARBAC97 model for role-based administration of roles. ACM Transactions on Information and Systems Security, 2(1): 105-135, 1999.
18. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role based access control models. IEEE Computer, 29(2):38-47, 1996.