Role-based access control for CORBA distributed object systems

Proceedings - International Workshop on Object-Oriented Real-Time Dependable Systems, WORDS

Volumn 2002-January, Issue , 2002, Pages 53-60

  Obelheiro, R R ^a   Fraga, J S ^a  

^a FEDERAL UNIVERSITY OF SANTA CATARINA   (Brazil)

Author keywords

Access control; Automation; Data security; Information security; Large scale systems; Management information systems; Middleware; NIST; Object oriented modeling; Permission

Indexed keywords

AUTOMATION; COMMON OBJECT REQUEST BROKER ARCHITECTURE (CORBA); INFORMATION MANAGEMENT; LARGE SCALE SYSTEMS; MANAGEMENT INFORMATION SYSTEMS; MIDDLEWARE; REAL TIME SYSTEMS; SECURITY OF DATA;

DISTRIBUTED OBJECT SYSTEM; DISTRIBUTED OBJECTS; NIST; OBJECT ORIENTED MODEL; PERMISSION; ROLE-BASED ACCESS CONTROL; ROLE-BASED ACCESS CONTROL MODEL; SECURITY COMPONENTS;

ACCESS CONTROL;

EID: 77950593797     PISSN: 15301443     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WORDS.2002.1000036     Document Type: Conference Paper

References (15)

1. Adiron. ORBAsec SL2 User Guide, version 2.1.4. Syracuse, NY, July 2000.
2. K. Beznosov and Y. Deng. A Framework for Implementing Role-Based Access Control Using CORBA Security Service. In Proceedings of the 4th ACM Workshop on Role-Based Access Control (RBAC'99), pages 19-30, Fairfax, VA, 1999.
3. G. Brose. JacORB - Design and Implementation of a Java ORB. In Proc. DAIS'97, pages 143-154, Sept. 1997.
4. D. Clark and D. Wilson. A Comparison of Commercial and Military Computer Security Policies. In Proceedings of the IEEE Symposium on Security and Privacy, pages 184-194, Oakland, CA, 1987.
5. D. F. Ferraiolo, J. F. Barkley, and D. R. Kuhn. A Role-Based Access Control Model and Reference Implementation Within a Corporate Intranet. ACM Transactions on Information and Systems Security, 2(1):34-64, Feb. 1999.
6. D. F. Ferraiolo, D. M. Gilbert, and N. Lynch. Assessing Federal and Commercial Information Security Needs. NISTIR 4976, National Institute of Standards and Technology, Gaithersburg, MD, Nov. 1992.
7. D. F. Ferraiolo and D. R. Kuhn. Role-Based Access Controls. In Proceedings of the 15th NIST-NCSC National Computer Security Conference, pages 554-563, Baltimore, MD, 1992.
8. L. Giuri. Role-Based Access Control on the Web Using Java. In Proceedings of the 4th ACM Workshop on Role-Based Access Control (RBAC'99), pages 11-18, Fairfax, VA, 1999.
9. T. Jaeger. Rebuttal to the NIST RBAC Model Proposal. In Proceedings of the 5th ACM Workshop on Role-Based Access Control (RBAC'2000), pages 65-66, Berlin, Germany, 2000.
10. Object Management Group. Security Service Specification, version 1.7. OMG Document 99-12-02, Dec. 1999.
11. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-Based Access Control Models. IEEE Computer, 29(2):38-47, Feb. 1996.
12. R. S. Sandhu, D. F. Ferraiolo, and D. R. Kuhn. The NIST Model for Role-Based Access Control: Towards a Unified Standard. In Proceedings of the 5th ACM Workshop on Role-Based Access Control (RBAC'2000), Berlin, Germany, 2000.
13. R. S. Sandhu and Q. Munawer. The ARBAC99 Model for Administration of Roles. In Proceedings of the 15th Annual Computer Security Application Conference, Scottsdale, AZ, Dec. 1999.
14. C. M. Westphall and J. S. Fraga. Authorization Schemes for Large-Scale Systems Based on Java, CORBA and Web Security Models. In Proceedings of the IEEE International Conference on Networks (ICON'99), pages 327-334, Brisbane, Australia, Sept. 1999.
15. C. M. Westphall, J. S. Fraga, and M. S. Wangham. PoliCap - A Policy Service for CORBA Security Model. In Proceedings of the 18th Brazilian Symposium on Computer Netorks, pages 355-370, May 2000. (in Portuguese).