A unified attribute-based access control model covering DAC, MAC and RBAC

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7371 LNCS, Issue , 2012, Pages 41-55

  Jin, Xin ^a   Krishnan, Ram ^a   Sandhu, Ravi ^a  

^a Institute for Cyber Security   (United States)

Author keywords

ABAC; Attribute; DAC; MAC; RBAC; XACML

Indexed keywords

ABAC; ATTRIBUTE; DAC; MAC; RBAC; XACML;

ARTIFICIAL INTELLIGENCE;

ACCESS CONTROL;

EID: 84864355928     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-31540-4_4     Document Type: Conference Paper

References (31)

1. OASIS, Extensible access control markup language (XACML), v2.0 (2005)
2. OASIS, Security assertion markup language (SAML), v2.0 (2005)
3. Abdallah, A.E., Khayat, E.J.: A formal model for parameterized role-based access control. In: Formal Aspects in Security and Trust (2004)
4. Al-Kahtani, M.A., Sandhu, R.S.: A model for attribute-based user-role assignment. In: ACSAC (2002)
5. Bertino, E., Catania, B., Ferrari, E., Perlasca, P.: A logical framework for reasoning about access control models. In: SACMAT (2001)
6. Bonatti, P.A., Samarati, P.: Regulating service access and information release on the web. In: ACM CCS (2000)
7. Bonatti, P.A., Samarati, P.: A uniform framework for regulating service access and information release on the web. J. Comp. Secur. (2002)
8. Chadwick, D.W., Otenko, A., Ball, E.: Role-based access control with X.509 attribute certificates. IEEE Internet Computing (2003)
9. Damiani, E., di Vimercati, S.D.C., Samarati, P.: New paradigms for access control in open environments. In: Int. Sym. on Sig. Proc. and Info. Tech. (2005)
10. Evered, M.: Supporting parameterised roles with object-based access control. In: HICSS (2003)
11. Ferraiolo, D.F., Sandhu, R., Gavrila, S., Richard Kuhn, D., Chandramouli, R.: Proposed nist standard for role-based access control. ACM Trans. Inf. Syst. Secur. (2001)
12. Fischer, J., Marino, D., Majumdar, R., Millstein, T.: Fine-Grained Access Control with Object-Sensitive Roles. In: Drossopoulou, S. (ed.) ECOOP 2009. LNCS, vol. 5653, pp. 173-194. Springer, Heidelberg (2009)
13. Fuchs, L., Pernul, G., Sandhu, R.: Roles in information security: A survey and classification of the research area. Comp. and Secur. (2011)
14. Ge, M., Osborn, S.L.: A design for parameterized roles. In: DBSec (2004)
15. Giuri, L., Iglio, P.: Role templates for content-based access control. In: ACM Workshop on RBAC (1997)
16. Jajodia, S., Samarati, P., Sapino, M.L., Subrahmanian, V.S.: Flexible support for multiple access control policies. ACM Trans. Database Syst. (2001)
17. El Kalam, A.A., Benferhat, S., Miège, A., El Baida, R., Cuppens, F., Saurel, C., Balbiani, P., Deswarte, Y., Trouessin, G.: Organization based access control. In: POLICY (2003)
18. Kandala, S., Sandhu, R., Bhamidipati, V.: An attribute based framework for risk-adaptive access control models. In: ARES (2011)
19. Lang, B., Foster, I.T., Siebenlist, F., Ananthakrishnan, R., Freeman, T.: A flexible attribute based access control method for grid computing. J. Grid Comput. (2009)
20. Li, N., Mitchell, J.C., Winsborough, W.H.: Design of a role-based trust management framework. In: 2002 IEEE S&P (2002)
21. Park, J., Sandhu, R.: The UCONabc usage control model. ACM Trans. Inf. Syst. Secur. (2004)
22. Sandhu, R.S.: Lattice-based access control models. IEEE Computer (1993)
23. Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Computer (1996)
24. Sandhu, R.S., Samarati, P.: Access control: Principles and practice. IEEE Com. Mag. (1994)
25. Schläger, C., Sojer, M., Muschall, B., Pernul, G.: Attribute-Based Authentication and Authorisation Infrastructures for E-Commerce Providers. In: Bauknecht, K., Pröll, B., Werthner, H. (eds.) EC-Web 2006. LNCS, vol. 4082, pp. 132-141. Springer, Heidelberg (2006)
26. Wang, L., Wijesekera, D., Jajodia, S.: A logic-based framework for attribute based access control. In: 2nd ACM Workshop on FMSE (2004)
27. Yong, J., Bertino, E., Toleman, M., Roberts, D.: Extended RBAC with role attributes. In: 10th Pacific Asia Conf. on Info. Sys. (2006)
28. Yu, T., Ma, X., Winslett, M.: Prunes: an efficient and complete strategy for automated trust negotiation over the internet. In: ACM CCS (2000)
29. Yu, T., Winslett, M., Seamons, K.E.: Interoperable strategies in automated trust negotiation. In: ACM CCS (2001)
30. Yu, T., Winslett, M., Seamons, K.E.: Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Trans. Inf. Syst. Secur. (2003)
31. Yuan, E., Tong, J.: Attributed based access control (ABAC) for web services. In: Intl. ICWS (2005)