On role mappings for RBAC-based secure interoperation

NSS 2009 - Network and System Security

Volumn , Issue , 2009, Pages 270-277

  Hu, Jinwei ^a   Li, Ruixuan ^a   Lu, Zhengding ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Administration; RBAC; Role mappings; Secure interoperation

Indexed keywords

ACCESS CONTROL POLICIES; ADMINISTRATIVE COST; INTER-DOMAIN; INTEROPERATIONS; NP COMPLETE; RBAC; RBAC POLICY; ROLE-BASED ACCESS CONTROL; SECURE INTEROPERATION; SEPARATION OF DUTY; SET COVER;

FLOWCHARTING; MAPPING; NETWORK SECURITY; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 72849134423     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NSS.2009.76     Document Type: Conference Paper

References (27)

1. G.-J. Ahn and R. S. Sandhu. Role-based authorization constraints specification. ACM Trans. Inf. Syst. Secur., 3(4):207-226, 2000.
2. M. Bishop. Computer Security - Art and Science. Addison-Wesley, 2003.
3. H. Chen and N. Li. Constraint generation for separation of duty. In ACM Symposium on Access Control Models and Technologies, pages 130 - 138, Lake Tahoe, California, USA, Jun. 2006.
4. D. D. Clark and D. R. Wilson. A comparison of commercial and military computer security policies. In Proceedings of the1987 IEEE Symposium on Security and Privacy, pages 184-194, 1987.
5. J. Crampton. Understanding and developing role-based administrative models. In ACM Conference on Computer and Communications Security, pages 158 - 167, Alexandria, VA, USA, Nov. 2005. CCS'05.
6. J. Crampton and G. Loizou. Administrative scope: A foundation for role-based administrative models. ACM Trans. Inf. Syst. Secur., 6(2):201-231, 2003.
7. S. Du and J. B. D. Joshi. Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy. In SACMAT, pages 228-236, 2006.
8. D. F. Ferraiolo, R. S. Sandhu, S. I. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur., 4(3):224-274, 2001.
9. M. R. Garey and D. S. Johnson. Computers and Intractability: A Guide to the Theory of NP-Completeness. 1979.
10. J. Hu, R. Li, and Z. Lu. Establishing rbac-based secure interoperability in decentralized multi-domain environments. In ICISC, pages 49-63, 2007.
11. J. Jin and G.-J. Ahn. Role-based access management for ad-hoc collaborative sharing. In SACMAT, pages 200-209, 2006.
12. J. B. Joshi, R. Bhatti, E. Bertino, and A. Ghafoor. Access-control language for multidomain environments. IEEE Internet Computing, 8(6):40-50, 2004.
13. A. Kapadia, J. Al-Muhtadi, R. H. Campbell, and M. D. Mick-unas. IRBAC 2000: Secure interoperability using dynamic role translation. In Proceedings of the 1st International Conference on Internet Computing, pages 231-238, 2000.
14. J. Li, J. Huai, and C. Hu. Peace-vo: A secure policy-enabled collaboration framework for virtual organizations. In SRDS, pages 199-208, 2007.
15. N. Li, Z. Bizri, and M. V. Tripunitara. On mutually-exclusive roles and separation of duty. In ACM Conference on Computer and Communications Security, pages 42-51, 2004.
16. C.-C. Pan, P. Mitra, and P. Liu. Semantic access control for information interoperation. In SACMAT, pages 237-246, 2006.
17. V. T. Paschos. A survey of approximately optimal solutions to some covering and packing problems. ACM Comput. Surv., 29(2):171-209, 1997.
18. S. Piromruen and J. B. D. Joshi. An rbac framework for time constrained secure interoperation in multi-domain environments. In 10th IEEE International Workshop on Object-Oriented RealTime Dependable Systems (WORDS 2005), pages 36-48, 2005.
19. R. S. Sandhu, V. Bhamidipati, and Q. Munawer. The arbac97 model for role-based administration of roles. ACM Trans. Inf. Syst. Secur., 2(1):105-135, 1999.
20. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
21. B. Shafiq, J. Joshi, E. Bertino, and A. Ghafoor. Secure interoperation in a multidomain environment employing rbac policies. IEEE Trans. Knowl. Data Eng., 17(11):1557-1577, 2005.
22. M. Shehab, E. Bertino, and A. Ghafoor. Secure collaboration in mediator-free environments. In ACM Conference on Computer and Communications Security, pages 58-67, 2005.
23. M. Shehab, E. Bertino, and A. Ghafoor. SERAT: SEcure Role mApping Technique for decentralized secure interoperability. In ACM Symposium on Access Control Models and Technologies, pages 159-167, 2005.
24. M. Shehab, E. Bertino, and A. Ghafoor. Proactive role discovery in mediator-free environments. In Peer-to-Peer Computing, pages 150-159, 2008.
25. M. Shehab, K. Bhattacharya, and A. Ghafoor. Web services discovery in secure collaboration environments. ACM Trans. Internet Techn., 8(1), 2007.
26. J. Vaidya, V. Atluri, Q. Guo, and N. Adam. Migrating to optimal rbac with minimal perturbation. In Proceedings of SACMAT'08, June 2008.
27. J. Vaidya, V. Atluri, and J. Warner. Roleminer: mining roles using subset enumeration. In ACM Conference on Computer and Communications Security, pages 144-153, 2006.