Personalizing access control by generalizing access control

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2010, Pages 149-158

  Barker, Steve ^a  

^a KING'S COLLEGE LONDON   (United Kingdom)

Author keywords

Access control models; Integrity; Privacy policies

Indexed keywords

ACCESS CONTROL MODELS; ACCESS POLICIES; AXIOMATIZATION; CONCEPTUAL FRAMEWORKS; DATA SUBJECTS; DEGREES-OF-CONTROL; META MODEL; PERSONAL DATA; PERSONAL INFORMATION; PRIVACY POLICIES;

SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 77954889727     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1809842.1809866     Document Type: Conference Paper

References (29)

1. M. Abadi, M. Burrows, B. W. Lampson, and G. D. Plotkin. A calculus for access control in distributed systems. ACM Trans. Program. Lang. Syst., 15(4):706-734, 1993.
2. A. H. Anderson. A comparison of two privacy policy languages: EPAL and XACMl. In SWS, pages 53-60, 2006.
3. ANSI. RBAC, 2004. INCITS 359-2004.
4. K. R. Apt and H. Blair. Arithmetic classification of perfect models of stratified programs. Fundamenta Informaticae, XIII:1-17, 1990.
5. M. Backes, M. Dürmuth, and G. Karjoth. Unification in privacy policy evaluation - translating EPAL into Prolog. In POLICY, pages 185-188, 2004.
6. S. Barker. The next 700 access control models or a unifying meta-model? In SACMAT, pages 187-196, 2009.
7. S. Barker, M. Leuschel, and M. Varea. Efficient and flexible access control via jones-optimal logic program specialisation. Higher-Order and Symbolic Computation, 21(1):5-35, 2008.
8. S. Barker and G. Lowen. Event-oriented web-based e-trading. Electr. Notes Theor. Comput. Sci., 235:35-53, 2009.
9. S. Barker, M. J. Sergot, and D. Wijesekera. Status-based access control. ACM Trans. Inf. Syst. Secur., 12(1), 2008.
10. S. Barker and P. Stuckey. Flexible access control policy specification with constraint logic programming. ACM Trans. on Information and System Security, 6(4):501-546, 2003.
11. D. E. Bell and L. J. LaPadula. Secure computer system: Unified exposition and multics interpretation. MITRE-2997, 1976.
12. H. A. Blair, V. W. Marek, and J. S. Schlipf. The expressiveness of locally stratified programs. Ann. Math. Artif. Intell., 15(2):209-229, 1995.
13. H. Boley, S. Tabet, and G. Wagner. Design rationale of ruleml: A markup language for semantic web rules. In SWWS 2001, pages 381-401, 2001.
14. D. F. C. Brewer and M. J. Nash. The Chinese Wall security policy. In IEEE Symposium on Security and Privacy, pages 206-214, 1989.
15. W. Chen and D. S. Warren. A goal-oriented approach to computing the well-founded semantics. J. Log. Program., 17(2/3&4):279-300, 1993.
16. The Ciao Prolog System, 2004.
17. E. F. Codd. A relational model of data for large shared data banks. Commun. ACM, 13(6):377-387, 1970.
18. L. F. Cranor. P3P : Making privacy policies more useful. IEEE Security & Privacy, 1(6):50-55, 2003.
19. S. Fischer-Hubner. IT-Security and Privacy. Springer, 2001.
20. D. M. Gabbay. Fibring logics. Oxford University Press, 1999.
21. K. LeFevre, R. Agrawal, V. Ercegovac, R. Ramakrishnan, Y. Xu, and D. J. DeWitt. Limiting disclosure in hippocratic databases. In VLDB, pages 108-119, 2004.
22. Q. Ni, E. Bertino, J. Lobo, and S. B. Calo. Privacy-aware role-based access control. IEEE Security & Privacy, 7(4):35-43, 2009.
23. Q. Ni, A. Trombetta, E. Bertino, and J. Lobo. Privacy-aware role based access control. In SACMAT, pages 41-50, 2007.
24. S. L. Osborn, R. S. Sandhu, and Q. Munawer. Configuring role-based access control to enforce mandatory and discretionary access control policies. ACM Trans. Inf. Syst. Secur., 3(2):85-106, 2000.
25. M. D. Schroeder and J. H. Saltzer. The protection of information in computer systems. Procs. IEEE 63, 9:1278-1308, 1975.
26. W. Simons, K. Mandl, and I. Kohane. The PING personally controlled electronic medical record system: Technical architecture. Journal of the American Medical Informatics Association, 12(1):45-54, 2005.
27. A. van Gelder. The alternating fixpoint of logic programs with negation. J. Comput. Syst. Sci., 47(1):185-221, 1993.
28. D. J. Weitzner, J. Hendler, T. Berners-lee, and D. Connolly. Creating the policy-aware web: Discretionary, rules-based access for the world wide web. In in Elena Ferrari and Bhavani Thuraisingham, editors, Web and Information Security. IOS. Idea Group Inc., 2005.
29. A. Westin. Privacy and Freedom. New York: Atheneum, 1967.