User-role reachability analysis of evolving administrative role based access control

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6345 LNCS, Issue , 2010, Pages 455-471

  Gofman, Mikhail I ^a   Luo, Ruiqi ^a   Yang, Ping ^a  

^a State University of New York at Binghamton   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTERS;

ACCESS CONTROL POLICIES; AUTHORIZED USERS; INCREMENTAL ALGORITHM; MANUAL INSPECTION; POLICY ANALYSIS; POLICY SPECIFICATION; REACHABILITY ANALYSIS; RESOURCE ACCESS; ROLE-BASED ACCESS CONTROL; USER ROLES;

ACCESS CONTROL;

EID: 78049386526     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-15497-3_28     Document Type: Conference Paper

References (18)

1. Conway, C., Namjoshi, K., Dams, D., Edwards, S.: Incremental algorithms for interprocedural analysis of safety properties. In: Etessami, K., Rajamani, S. K. (eds.) CAV 2005. LNCS, vol. 3576, pp. 449-461. Springer, Heidelberg (2005)
2. Crampton, J.: Authorizations and antichains, ph.d. thesis, university of london (2002)
3. Fisler, K., Krishnamurthi, S., Meyerovich, L. A., Tschantz, M. C.: Verification and changeimpact analysis of access-control policies. In: International Conference on Software Engineering (ICSE), pp. 196-205 (2005)
4. Gupta, A., Katiyar, D., Mumick, I. S.: Counting solutions to the view maintenance problem. In: Workshop on Deductive Databases, pp. 185-194 (1992)
5. Gupta, A., Mumick, I. S., Subrahmanian, V. S.: Maintaining views incrementally. In: International Conference on Management of Data, pp. 157-166 (1993)
6. Harrison, M. A., Ruzzo, W. L., Ullman, J. D.: Protection in operating systems. Communications of the ACM 19(8), 461-471 (1976)
7. Jackson, D., Schechter, I., Shlyakhter, I.: Alcoa: the alloy constraint analyzer, pp. 730-733 (June 2000)
8. Jha, S., Li, N., Tripunitara, M., Wang, Q., Winsborough, W.: Towards formal verification of role-based access control policies. IEEE Transactions on Dependable and Secure Computing 5 (2) (2008)
9. Jha, S., Reps, T.: Model-checking SPKI-SDSI. Journal of Computer Security 12, 317-353 (2004)
10. Li, N., Tripunitara, M. V.: Security analysis in role-based access control. ACM Transactions on Information and System Security 9(4), 391-420 (2006)
11. Lu, J., Moerkotte, G., Schu, J., Subrahmanian, V. S.: Efficient maintenance of materialized mediated views (1995)
12. Sandhu, D. F. F. R., Kuhn, D. R.: The NIST model for role based access control: Towards a unified standard. In: ACM SACMAT, pp. 47-63 (2000)
13. Saha, D., Ramakrishnan, C. R.: Incremental evaluation of tabled logic programs. In: International Conference on Logic Programming, pp. 392-406 (2003)
14. Sandhu, R.: The typed access matrix model. In: Proc. IEEE Symposium on Security and Privacy, pp. 122-136 (1992)
15. Sandhu, R., Bhamidipati, V., Munawer, Q.: The ARBAC97 model for role-based administration of roles. ACM Transactions on Information and Systems Security 2(1), 105-135 (1999)
16. Sasturkar, A., Yang, P., Stoller, S. D., Ramakrishnan, C.: Policy analysis for administrative role based access control. In: 19th IEEE Computer Security Foundations Workshop (2006)
17. Schaad, A., Moffett, J. D.: A lightweight approach to specification and analysis of role-based access control extensions. In: Proc.of SACMAT, pp. 13-22 (2002)
18. Stoller, S., Yang, P., Ramakrishnan, C. R., Gofman, M.: Efficient policy analysis for administrative role based access control. In: ACM CCS, pp. 445-455 (2007)