Risk analysis in access control systems

PST 2010: 2010 8th International Conference on Privacy, Security and Trust

Volumn , Issue , 2010, Pages 160-166

  Ma, J ^a   Adi, K ^b   Mejri, M ^a   Logrippo, L ^a  

^a UNIVERSITÉ DU QUÉBEC EN OUTAOUAIS   (Canada)

^b UNIVERSITÉ LAVAL   (Canada)

Author keywords

Access control; Model; RBAC; RBACR; Risk analysis

Indexed keywords

ACCESS CONTROL DECISIONS; ACCESS CONTROL POLICIES; PARTIAL ORDERING; PROTECTED OBJECT; RBAC; RBACR; RISK ASSESSMENT METHODS; ROLE DELEGATION; ROLE-BASED ACCESS CONTROL MODEL;

CONTROL SYSTEM ANALYSIS; CONTROL SYSTEMS; RISK ANALYSIS; RISK ASSESSMENT; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 78549269431     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PST.2010.5593248     Document Type: Conference Paper

References (11)

1. M. A. Al-Kahtani and R. S. Sandhu. A model for attribute-based user-role assignment. In ACSAC, pages 353-364, 2002.
2. B. Aziz, S. N. Foley, J. Herbert, and G. Swart. Reconfiguring role based access control policies using risk semantics. J. High Speed Networks, 15(3):261-273, 2006.
3. D. E. Bell and L. J. LaPadula. Secure computer system: Unified exposition and multics interpretation. In Technical Report MTR-2997, The MITRE Corporation, Bedford, Massachusetts, 1976.
4. N. Dimmock, A. Belokosztolszki, D. M. Eyers, J. Bacon, and K. Moody. Using trust and risk in role-based access control policies. In SACMAT, pages 156-162, 2004.
5. S. Kondo, M. Iwaihara, M. Yoshikawa, and M. Torato. Extending RBAC for large enterprises and its quantitative risk evaluation. In II3E, pages 99-112, 2008.
6. N. Nissanke and E. J. Khayat. Risk based security analysis of permissions in rbac. In WOSIS, pages 332-341, 2004.
7. S. A. Obiedkov, D. G. Kourie, and J. H. P. Eloff. On lattices in access control models. In ICCS, pages 374-387, 2006.
8. R. S. Sandhu. Lattice-based access control models. IEEE Computer, 26(11):9-19, 1993.
9. R. S. Sandhu. Role hierarchies and constraints for lattice-based access controls. In ESORICS, pages 65-79, 1996.
10. R. S. Sandhu and V. Bhamidipati. An oracle implementation of the PRA97 model for permission-role assignment. In ACM Workshop on Role-Based Access Control, pages 13-21, 1998.
11. H. Takabi, M. Amini, and R. Jalili. Trust-based user-role assignment in role-based access control. In AICCSA, pages 807-814, 2007.