A risk management approach to RBAC

Risk and Decision Analysis

Volumn 1, Issue 1, 2009, Pages 21-33

  Celikel, Ebru ^a   Kantarcioglu, Murat ^a   Thuraisingham, Bhavani ^a   Bertino, Elisa ^b  

^a UNIVERSITY OF TEXAS AT DALLAS   (United States)

^b PURDUE UNIVERSITY   (United States)

Author keywords

access control; RBAC; Risk management

Indexed keywords

EID: 79151475857     PISSN: 15697371     EISSN: 18759173     Source Type: Journal    
DOI: 10.3233/RDA-2008-0002     Document Type: Article

References (23)

1. B. Ayyub, Risk Analysis in Engineering and Economics, Chapman & Hall, CRC, USA, 2003.
2. J. Bacon, N. Dimmock, D. Ingram, K. Moody, B. Shand and A. Twigg, SECURE Deliverable 3.1: Definition of risk model, December 2002.
3. E. Bertino, A. Kamra, E. Terzi and A. Vakali, Intrusion detection in RBAC-administered databases, in: 21st Annual Computer Security Applications Conference, Tucson, AZ, USA, December 2005.
4. C. Borgelt and R. Kruse, Graphical Models Methods for Data Analysis and Mining, Wiley, Chichester, UK, 2002.
5. V. Cahill, W. Wagealla, P. Nixon, S. Terzis, H. Lowe and A. McGettrick, Using trust for secure collaboration in uncertain environments, IEEE Pervasive Computing 2 (2003), 52-61.
6. M. Carbone, N. Dimmock, K. Krukow and M. Nielsen, Revised Computational Trust Model, EU IST-FET Project Deliverable, 2004.
7. M. Carbone, M. Nielsen and V. Sassone, A formal model for trust in dynamic networks, in: 1st IEEE International Conference on Software Engineering & Formal Methods, Brisbane, Australia, September 25-26, 2003.
8. N. Dimmock, How much is enough? Risk in trust-based access control, in: IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises - Enterprise Security, Linz, Austria, June 2003, pp. 281-282.
9. N. Dimmock, J. Bacon, D. Ingram and K. Moody, Risk models for trust-based access control (TBAC), in: Third International Conference iTrust 2005, Paris, France, May 23-26, 2005.
10. N. Dimmock, A. Belokosztolszki, D. Eyers, J. Bacon and K. Moody, Using trust and risk in role-based access control policies, in: 9th ACM Symposium on Access Control Models and Technologies, Yorktown Heights, NY, USA, June 2-4, 2004.
11. C. English, W. Wagealla, P. Nixon, S. Terzis, H. Lowe and A. McGettrick, Trusting collaboration in global computing systems, in: Trust Management: First International Conference, iTrust 2003, Heraklion, Crete, Greece, May 28-30, 2003, LNCS, Vol. 2692, Springer-Verlag, 2003, pp. 136-149.
12. D. Ferraiolo and R. Kuhn, Role-based access control, in: 15th NIST-NSCS National Computer Security Conference, Baltimore, MD, USA, 1992, pp. 554-563.
13. M.P. Gallaher, A.C. O'Connor and B. Kropp, The economic impact of role-based access control, Planning Report 02-1 for NIST, NC, USA, March 2002.
14. B.R. Munier and C. Tapiero, Risk attitudes, in: Encyclopedia of Quantitative Risk Assessment and Analysis, Wiley, New York, 2008.
15. N. Nissanke and E.J. Khayat, Risk based security analysis of permissions in RBAC, in: 2nd International Workshop on Security In Information Systems, Porto, Portugal, April 2004.
16. R.S. Sandhu, E.J. Coyne, H.L. Feinstein and C.E. Youman, Role based access control models, IEEE Computer 29(2) (1996), 38-47.
17. M.G. Sedeno, M.I.B. Garcia and C.G. Tejera, The function of subjective utility as an indicator of job satisfaction, Psychology in Spain 4(1) (2000), 129-138.
18. B. Shand, N. Dimmock and J. Bacon, Trust for ubiquitous, transparent collaboration, Wireless Networks 10 (2004) 711-721.
19. P.N. Tan, M. Steinbach and V. Kumar, Introduction to Data Mining, Pearson Education, USA, 2006.
20. C. Tapiero, Risk management: An interdisciplinary framework, ESSEC Research Center, France, 2003.
21. Q. Yao, A. An and X. Huang, Finding and analyzing database user sessions, in: 10th International Conference Database Systems for Advanced Applications, Beijing, China, April 17-20, 2005, LNCS, Vol. 3453, 2005, pp. 851-862.
22. C.N. Zhang and C. Yang, An object-oriented RBAC model for distributed system, in: Working IEEE/IFIP Conference on Software Architecture (WISCA'01), Amsterdam, The Netherlands, August 28-31, 2001, pp. 24-32.
23. G.K. Zipf, Selected Studies of the Principle of Relative Frequency in Language, Harvard University Press, Cambridge, MA, USA, 1932.