Managing security policies in a distributed environment using eXtensible Markup Language (XML)

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2001, Pages 405-411

  Vuong, Nathan N ^a   Smith, Geoffrey S ^a   Deng, Yi ^b  

^a Florida International University   (United States)

^b UNIVERSITY OF TEXAS AT DALLAS   (United States)

Author keywords

Distributed authorization; Java; Managing security policies; Meta language; RBAC; XML

Indexed keywords

ACCESS CONTROL; HYPERTEXT SYSTEMS; SECURITY SYSTEMS;

DISTRIBUTED AUTHORIZATION; JAVA; META LANGUAGE; RBAC; SECURITY POLICY;

XML;

EID: 77954476833     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/372202.372386     Document Type: Conference Paper

References (17)

1. P. Ashley and B. Broom. 1997. An Implementation of the SESAME Security Architecture for Linux. Australian Unix and Open Systems Group Technical Conference.
2. Roland Awischus. 1998. Access Control with the Security Administration Manager (SAM). 2nd ACM Workshop on Role-Based Access Control. Fairfax, Va.
3. Y. Bai and V. Varadharajan. 1997. A Logic for State Transformations in Authorization Policies. Proceedings of the IEEE Computer Security Foundations Workshop. June 1997.
4. Dorothy E. Denning. 1982. Cryptography and Data Security. Addison-Wesley Publishing Company, 191-259.
5. W. Essmayr, E. Kapsammer, R. R. Wagner, G. Pernul, A. M. Tjoa. 1998. Enterprise-Wide Security Administration. Annual IEEE Computer Application Security Conference.
6. Serban I. Gavrila and John F. Barkley. 1998. Formal Specification for Role Based Access Control User/Role and Role/Role Relationship Management. 3rd ACM Workshop on Role-Based Access Control. Fairfax, Va.
7. John Hale, Pablo Galiasso, Mauricio Papa, and Sujeet Shenoi. 1999. Security Policy Coordination for Hetergeneous Information Systems. Annual IEEE Computer Application Security Conference.
8. S. Jajodia, P. Samarati, and V.S. Subrahmanian. 1997. A Logical Language for Expressing Authorizations. Proceedings of the IEEE Symposium on Security and Privacy. May 1997.
9. Jonathan D. Moffett and Emil C. Lupu. 1999. The Uses of Role Hierarchies in Access Control. 4th ACM Workshop on Role-Based Access Control. Fairfax, Va.
10. Internet Engineering Task Force, Network Working Group. RFC 2396-Uniform Resource Identifiers (URI): Generic Syntax. 1998. http://www.ietf.org.
11. OMG CORBAservices Common Object Services Specification: CORBA Security Services v1.2. December 1998.
12. OMG CORBAmed DTF. Resource Access Decision (RAD), Revised Submission. 26 April 1999.
13. Ravi S. Sandhu, Edward J. Coyne, Hal L. Feinstein, and Charles E. Youman. 1996. Role-Based Access Control Models. IEEE Computer, 29(2):38-47.
14. Mark Vandenwauver, René Govaerts, Joos Vandewalle. 1997. How Role Based Access Control is implemented in SESAME. Proceedings of the 6-th Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, pages 293-298. IEEE Computer Society Press.
15. Vijay Varadharajan, Chris Crall, and Joe Pato. 1998. Authorization in Enterprise-wide Distributed System, A Practical Design and Application. 14th Annual Computer Security Application Conference.
16. T.Y.C. Woo and S.S. Lam. 1992. Authorizations in Distributed Systems: A Formal Approach. Proceedings of the IEEE Symposium on Research in Security and Privacy. 1992, pp. 33-50.
17. Extensible Markup Language (XML) 1.0-W3C Recommendation 10-Feb-98. HTTP://www.w3.org/TR/1998/REC-xml-19980210.