A role-based XACML administration and delegation profile and its enforcement architecture

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 53-60

  Xu, Min ^a   Wijesekera, Duminda ^a  

^a George Mason University   (United States)

Author keywords

Access control; Administration; ARBAC; Authorization; Delegation; RBAC; Web service security; XACML

Indexed keywords

ADMINISTRATION; DELEGATION MECHANISMS; ENFORCEMENT MECHANISMS; ROLE-BASED; ROLE-BASED DELEGATION; RUNTIMES; TECHNICAL COMMITTEES; WEB SERVICE SECURITY;

NETWORK SECURITY; SECURITY SYSTEMS; WEB SERVICES;

ACCESS CONTROL;

EID: 74049157370     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655121.1655132     Document Type: Conference Paper

References (21)

1. Core and hierarchical role based access control (RBAC) profile of XACML v2.0, http://docs.oasisopen.org/xacml/2.0/access control-xacml-2.0-rbac- profile1-spec-os.pdf.
2. ISO 9594-8/ITU-T Rec. X. 509 (2001) The Directory: Public-key and attribute certificate frameworks.
3. OASIS XACML v3.0 administration and delegation profile version 1.0, http://www.oasisopen.org.
4. Sun's XACML implementation, http://sunxacml.sourceforge.net/.
5. O. Bandmann, M. Dam, and B. Sadighi. Constrained delegation. In Proceedings of IEEE Symposium on Security and Privacy, May 2002.
6. E. Barka and R. Sandhu. Framework for role-based delegation models. In Proceedings of 16th Annual Computer Security Application Conference (ACSAC 2000), December 2000.
7. E. Barka and R. Sandhu. A role-based delegation model and some extensions. In Proceedings of 23rd National Information Systems Security Conference (NISSC 2000), December 2000.
8. D.W. Chadwick and A. Otenko. The PERMIS X.509 Role Based Privilege Management Infrastructure. In Proc 7th ACM Symposium On Access Control Models And Technologies (SACMAT), June 2002.
9. D.W. Chadwick, S. Otenko, and T.A. Nguyen. Adding Support to XACML for Dynamic Delegation of Authority in Multiple Domains. In Proc of 10th IFIP TC-6 TC-11 Int Conf, CMS 2006, October 2006.
10. M. Gaseer and E. McDermott. An architecture for practical delegation in a distributed system. In Proceedings of IEEE Symposium on Security and Privacy, May 1990.
11. N. Li, B. Grosof, and J. Feigenbaum. A practiacally implementale and tractable delegation logic. In Proceedings of 2000 IEEE Symposium on Security and Privacy, 2000.
12. N. Li, J. Mitchell, and W. Winsborough. Design of a role-based trust-management framework. In Proceedings of 2002 IEEE Symposium on Security and Privacy, 2002.
13. J. D. Moffett. Delegation of Authority Using Domain Based Access Rules. PhD thesis, Dept of Computing, Imperial Colleg, 1990.
14. N. Nagaratnam and D. Lea. Secure delegation for distributed object environments. In Proceedings of USENIX Conference on Objected Oriented Technology and Systems, April 1998.
15. OASIS XACML TC. Core Specification: eXtensible Access Control Markup Language (XACML), 2005.
16. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman. Role based access control models. IEEE Computer, 29, (2), pp.38-47, 1996, 29(2), 1996.
17. L. Seitz, E. Rissanen, T. Sandholm, B. Sadighi, and O. Mulmo. Policy administration control and delegation using XACML and delegent. In Proceedings of 6th IEEE/ACM International Workshop on Grid Computing, November 2005.
18. R. Tamassia, D. Yao, and W. Winsborough. Role-based cascaded delegation. In Proceedings of Ninth ACM Symposium On Access Control Models And Technologies (SACMAT 2004), June 2004.
19. M. Xu, D. Wijesekera, X. Zhang, and D. Corray. Towards session-ware RBAC administration and enforcement with XACML. In to appear in the IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY), 2009.
20. L. Zhang, G. Ahn, and B. Chu. A rule-based framework for role-based delegation. In Proceedings of Sixth ACM Symposium On Access Control Models And Technologies (SACMAT 2001), June 2001.
21. X. Zhang and R. Sandhu. PBDM: A flexible delegation model in RBAC. In Proceedings of Eighth ACM Symposium On Access Control Models And Technologies (SACMAT 2003), June 2003.