Separation of duty in role-based environments

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 1997, Pages 183-194

  Simon, Richard T ^a   Zurko, Mary Ellen ^a  

^a Whitehd Inst for Biomed Research   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY OF DATA; SECURITY SYSTEMS;

AUTHORIZATION LANGUAGES; COMPUTING ENVIRONMENTS; COMPUTING SYSTEM; ROLE-BASED; SEPARATION OF DUTY;

SEPARATION;

EID: 79957904799     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.1997.596811     Document Type: Conference Paper

References (17)

1. Baldwin, R. W. "Naming and Grouping Privileges to Simplify Security Management in Large Database" Proc. 1990 IEEE Symposium on Security and Privacy, 116-132, May 1990.
2. Bell, D.E., La Fadula, L.J. "Secure Computer Systems: Unified Exposition and Multics Interpretation" MTR-2997 Rev. 1, MITRE Corp., Bedford, MA, March 1976.
3. Brewer, D. F. C., Nash, M. J. "The Chinese Wall Security Policy" Proc. 1989 IEEE Symposium on Security and Privacy, 206-214, May 1989.
4. Clark, D.D., Wilson, D.R. "A Comparison of Commercial and Military Computer Security Policies" Proc. 1987 IEEE Symposium on Security and Privacy, 184-194, April 1987.
5. Department of Defense National Computer Security Center, Department of Defense Trusted Computer Systems Evaluation Criteria, DoD 5200.28-STD, 1985.
6. Edwards, K. E. "Policies and Roles in Collaborative Applications" Proc. CSCW 96, November 1996.
7. Ferraiolo, D., Cugini, J., Kuhn, D. R. "Role-Based Access Control (RBAC): Features and Motivations" Proc. 1995 Computer Security Applications Conference, 241-248, December 1995.
8. Nash, M. J., Poland, K. R. "Some Conundrums Concerning Separation of Duty" Proc. 1990 IEEE Symposium on Security and Privacy, 201-207, May 1990.
9. Saltzer, J.H., and Schroeder, M.D. "The Protection of Information in Computer Systems," Proceedings of IEEE, 63(9)
10. Sandhu, R. "Transaction Control Expressions for Separation of Duties" Proc. 4th Aerospace Computer Security Conference, 282-286, Dec. 1988.
11. Sandhu, R. "Separation of Duties in Computerized Information Systems" Proc. IFIP WG11.3 Workshop on Database Security, September 1990.
12. Sandhu, R. "A Lattice Interpretation of the Chinese Wall Policy" Proc. of the 15th NIST-NCSC National Computer Security Conference, 221-235, October 1992.
13. Sandhu, R., Feinstein, H. "A Three Tier Architecture for Role-Based Access Control" Proc. of the 17th NIST-NCSC National Computer Security Conference, 138-149, October 1994.
14. Sandhu, R., Coyne, E., Feinstein, H., Youman, C. "Role- Based Access Control: A Multi-Dimensional View" Proc. 10th Annual Computer Security Applications Conference, 54-1278-1308, 1975. 62, December 1994.
15. Simon, R., Zurko, M. E. "Adage: An Architecture for Distributed Authorization" http://www.osf.orglwww/adageladagearch- drafvadage-arch-draft.ps.
16. Thomas, R. K., Sandhu, R. S. "Conceptual Foundations for a Model of Task-based Authorizations" Proc. of The Computer Security Foundations Workshop VU, June 1994.
17. Zurko, M. E., Simon, R. T. "User Centered Security" Proc. New Security Paradigms Workshop, September 1996.