An architecture for specification and enforcement of temporal access control constraints using OWL

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 21-28

  Takabi, Hassan ^a   Kim, Minsoo ^b   Joshi, James B D ^a   Spring, Michael B ^a  

^a UNIVERSITY OF PITTSBURGH   (United States)

^b Ajou University   (South Korea)

Author keywords

Access control; GTRBAC; OWL; Temporal constraints

Indexed keywords

GTRBAC; KEY FEATURE; OWL ONTOLOGIES; RBAC MODEL; ROLE-BASED ACCESS CONTROL MODEL; SCALABLE ARCHITECTURES; SECURITY MANAGEMENT; TEMPORAL CONSTRAINTS; TEMPORAL DURATIONS; TIME SPAN; WEB ONTOLOGY LANGUAGE; WEB SECURITY;

INDUSTRIAL MANAGEMENT; NETWORK SECURITY; ONTOLOGY; SECURITY SYSTEMS; SEMANTIC WEB; SEMANTICS; SPECIFICATIONS; WEB SERVICES;

ACCESS CONTROL;

EID: 74049124413     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655121.1655127     Document Type: Conference Paper

References (21)

1. J. Joshi, E. Bertino, U. Latif, and A. Ghafoor, "A Generalized Temporal Role-Based Access Control Model", IEEE Transactions on Knowledge and Data Engineering, Vol. 17, No. 1, pages 4-23, 2005.
2. T. Finin, A. Joshi, L. Kagal, J. Niu, R. Sandhu, W. Winsborough, and B. Thuraisingham, "ROWLBAC - Representing Role Based Access Control in OWL", In Proc. of the 13th ACM symposium on access control models and technologies (SACMAT 2008), pages 72-83, 2008.
3. "OWL Web Ontology Language Overview", http://www.w3.org/TR/owl- features/
4. "http://protege.stanford.edu"
5. "http://www.racer-systems.com"
6. "http://dl.kr.org/dig"
7. "http://jena.sourceforge.net"
8. M. Knechtel, J. Hladik, and F. Dau. "Using owl dl reasoning to decide about authorization in RBAC", In Proc. of the OWLED 2008 Workshop on OWL: Experiences and Directions, 2008.
9. L. Kagal, T. Berners-Lee, D. Connolly, and D. Weitzner, "Using semantic web technologies for policy management on the web", In Proc. of the 21st National Conference on Artificial Intelligence (AAAI), 2006.
10. V. Kolovski, J. Hendler, and B. Parsia, "Analyzing web access control policies", In Proc. of the International World Wide Web Conference (WWW 2007), pages 677-686, 2007.
11. W. Di, L. Jian, D. Yabo, and Z. Miaoliang, "Using semantic web technologies to specify constraints of RBAC", In Proc. of the Sixth International Conference on Parallel and Distributed Computing, Applications and Technologies (PDCAT 2005), pages 543-545, 2005.
12. N. Heilili, Y. Chen, C. Zhao, Z. Luo, and Z. Lin, "An OWL-Based Approach for RBAC with Negative Authorization", In J. Lang, F. Lin, and J. Wang (Eds.): KSEM 2006, LNAI 4092, pp. 164-175, 2006.
13. T. Finin, A. Joshi, L. Kagal, J. Niu, R. Sandhu, W. Winsborough, and B. Thuraisingham, "Role Based Access Control and OWL", In Proc. of the fourth workshop in the The OWL: Experiences and Direction (OWLED), 2008.
14. M. Knechtel and J. Hladik, "RBAC Authorization decision with DL reasoning", In Proc. of the IADIS International Conference WWW/Internet, pages 169-176, 2008.
15. L. Cirio, I. F. Cruz, and R. Tamassia, "A Role and Attribute Based Access Control System Using Semantic Web Technologies", In Proc. of IFIP International Workshop on Semantic Web and Web Semantics (SWWS), pages 1256-1266, 2007.
16. L. Kagal, T. Finin, and A. Joshi, "A policy based approach to security for the semantic web", In Proc. of International Semantic Web Conference (ISWC 2003), 2003.
17. L. Kagal, T. Finin, and A. Joshi, "A policy language for pervasive computing environment", In Proc. of IEEE Fourth International Workshop on Policy (Policy 2003), pages 63-76, Italy, 2003.
18. A. Uszok, J. Bradshaw, R. Jeffers, N. Suri, P. Hayes, M. Breedy, L. Bunch, M. Johnson, S. Kulkarni, and J. Lott, "KAoS policy and domain services: Toward a description-logic approach to policy representation, deconfliction, and enforcement", In Proc. of IEEE Fourth International Workshop on Policy (Policy 2003), pages 93-98, Italy, 2003.
19. J. Bradshaw, A. Uszok, R. Jeffers, N. Suri, P. Hayes, M. Burstein, A. Acquisti, B. Benyo, M. Breedy, M. Carvalho, D. Diller, M. Johnson, S. Kulkarni, J. Lott, M. Sierhuis, and R.V. Hoof, "Representation and reasoning for daml-based policy and domain services in kaos and nomads", In Proc. of the Autonomous Agents and Multi-Agent Systems Conference (AAMAS 2003), pages 835-842, Australia, 2003.
20. N. Damianou, N. Dulay, E. Lupu, and M. Sloman, "The ponder policy specification language", In Proc. of Workshop on Policies for Distributed Systems and Networks (POLICY 2001), UK, 2001.
21. Y. Zhang and J. Joshi, "Design and Implementation of a Scaleable GTRBAC System", Submitted to 2009 Annual Computer Security Applications Conference (ACSAC), USA, 2009.