A system to specify and manage multipolicy access control models

Proceedings - 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002

Volumn , Issue , 2002, Pages 116-127

  Bertino, E ^a   Catania, B ^b   Ferrari, E ^c   Perlasca, P ^a  

^a UNIVERSITY OF MILAN   (Italy)

^b UNIVERSITY OF GENOA   (Italy)

^c UNIVERSITY OF INSUBRIA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; AUTHORIZATION MANAGEMENT; DISCRETIONARY MODELS; MODEL SPECIFICATIONS; MULTI-POLICY ACCESS CONTROL MODELS;

SPECIFICATION LANGUAGES;

ACCESS CONTROL;

EID: 84893074859     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2002.1011299     Document Type: Conference Paper

References (15)

1. M. Abadi and L. Lamport. Composing Specifications. In Stepwise Refinement of Distributed Systems-Models, Formalisms, Correctness, Springer-Verlag, Vol. 430, pp. 1-41, 1989.
2. S. Barker. Protecting Deductive Databases from Unauthorized Retrievals. In Data and Application Security, Development and Directions, IFIP TC11/WG11.3 14th Annual Working Conference on Database Security, Kluwer Academic Publishers, Vol. 201, pp. 185-196, 2000.
3. D. Bell and L. LaPadula. Secure Computer Systems: Unified Exposition and Multics Interpretation. ESDTR-75-306, Hanscom Air Force Base, Bedford, MA, 1975.
4. E. Bertino, B. Catania, E. Ferrari, and P. Perlasca. A Logical Framework for Reasoning about Access Control Models. In Proceedings of 6th ACM Symposium on Access Control Models and Technologies, May 3-4, 2001, Litton-TASC Westfields II Conference Facility Chantilly, VA, U.S.A.
5. P. A. Bonatti, S. De Capitani di Vimercati, and P. Samarati. A Modular Approach to Composing Access Control Policies. In Proceedings of the 7th ACM conference on Computer and communications security, 164-173, Athens, Greece, 2000. ACM Press.
6. S. Castano, M. Fugini, G. Martella, and P. Samarati. Database Security. Addison-Wesley, 1995.
7. J. Chomicki, J. Lobo, and S. Naqvi A Logic Programming Approach to Conflict Resolution in Policy Management. In Anthony G. Cohn and Fausto Giunchiglia and Bart Selman editors, KR2000: Principles of Knowledge Representation and Reasoning, Morgan Kaufmann, pp. 121-132, 2000.
8. E. Ferrari and B. Thuraisingham. Secure Database Systems. In O. Diaz and M. Piattini editors, Advanced Databases: Technology and Design, Artech House, London, 2000.
9. S. Greco, N. Leone, and P. Rullo. COMPLEX: An Object-Oriented Logic Programming System. In IEEE Transactions on Knowledge and Data Engineering, 4:72-87, 1992.
10. S. Jajodia, P. Samarati, V.S. Subrahmanian, and E. Bertino. A Unified Framework for Enforcing Multiple Access Control Policies. In Proceedings of ACMSIGMOD, 1997.
11. S. Jajodia, P. Samarati, M.L. Sapino, and V.S. Subrahmanian. Flexible Support for Multiple Access Control Policies. In ACM Transactions on Database Systems, 26:2, pp. 214-260, 2001.
12. M. Koch, L. Mancini, and F. Parisi-Presicce. On the Specification and Evolution of Access Control Policies. In Proceedings of the 6th ACM Symposium on Access Control Models and Technologies (SACMAT-01), Chantilly, Virginia, USA, pp. 121-130, 2001.
13. R. Sandhu et al. Role-Based Access Control Models. In IEEE Computer, pp. 38-47, February 1996.
14. R. Sandhu, D. Ferraiolo and R. Kuhn. The NIST Model for Role-Based Access Control: Towards a Unified Standard. In 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, pp. 47-63, 2000.
15. J. Ullman. Principles of Database and Knowledge Base Systems. Computer Science Press, Vol. 1 & 2, 1989.