Creating a policy-aware web: Discretionary, rule-based access for the World Wide Web

Web and Information Security

Volumn , Issue , 2005, Pages 1-31

  Weitzner, Daniel J ^a   Hendler, Jim ^b   Berners Lee, Tim ^a   Connolly, Dan ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84899266027     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-59140-588-7.ch001     Document Type: Chapter

References (53)

1. Ackerman, M., Darrell, T., & Weitzner, D.J. (2001). Privacy in context. Human-Computer Interaction, 16, 167-176
2. th ACM Conference on Computer and Communications Security, November, Singapore.
3. Asenjo, F.G. (1966). A calculus of antinomies. Notre Dame Journal of Formal Logic, XVI, 103-5.
4. Barbour, G. (2002). Program modeling: A machine learning approach to intrusion detection. Unpublished doctoral thesis, University of Maryland, Computer Science Department.
5. Barbuti, R., Bernardeschi, C., & De Francesco, N. (2004). Analyzing information flow properties in assembly code by abstract interpretation. The Computer Journal, 47(1), 25-45
6. Bauer, L. (2003). Access control for the Web via proof-carrying authorization. Unpublished doctoral thesis, Princeton University, Princeton, NJ.
7. th USENIX Security Symposium, August, San Francisco.
8. Behrend, A. (2003). Soft stratification for magic set based query evaluation in deductive databases. Proceedings of the International Conference on Management of Data and Symposium on Principles of Database, San Diego.
9. Berman, J., & Weitzner, D. (1995). Abundance and user control: Renewing the democratic heart of the First Amendment in the age of interactive media. Technical Report No. 104 Yale L.J. 1619), New Haven, CT: Yale University.
10. Berners-Lee, T. (2000). Primer: Getting into RDF & Semantic Web using N3. Retrieved April 30, 2005, from http://www.w3.org/2000/10/swap/Primer
11. Berners-Lee, T. (2000, December). Semantic Web. Presentation at XML 2000, Washington, DC. Retrieved April 30, 2005, from http://www.w3.org/2000/Talks/1206-xml2k-tbl/slide10-0.html
12. Berners-Lee, T. (2000). CWM-A general purpose data processor for the Semantic Web. Retrieved April 30, 2005, from http://www.w3.org/2000/10/swap/doc/cwm.html
13. Berners-Lee, T., Fielding, R., & Frystyk, H. (1996, February). Hypertext Transfer Protocol - HTTP/1.0. HTTP Working Group.
14. Berners-Lee, T., Hendler, J., & Lassila, O. (2001, May). The Semantic Web: When the Internet gets smart. Scientific American.
15. Boley, H., Tabet, S., & Wagner, G. (2001). Design rationale of RuleML: A markup language for Semantic Web rules. Proceedings of SWWS'01, July/August, Stanford, CA.
16. Boneh, D. & Franklin, M. (2001). Identity based encryption from the Weil pairing. Crypto 2001, LNCS 2139, 213-229.
17. Burrows, M., Abadi, M., & Needham, R. (1989). A logic of authentication. Proceedings of the Royal Society of London, LNCS 426 (pp. 233-271).
18. da Costa, N.C.A., & Dubikajtis, L. (1977). On Jaskowski's discussive logic. In A.I. Arruda, N.C.A. da Costa, & R. Chuaqui (Eds.), Non-classical logics, modal theory and computability (pp. 37-56). Amsterdam, The Netherlands: North-Holland Publishing Company.
19. Didriksen, T. (1997). Rule based database access control: A practical approach. ACM Workshop on Role-Based Access Control, 143-151.
20. Dunn, J.M. (1976). Intuitive semantics for first degree entailment and coupled trees. Philosophical Studies, XXIX, 149-68.
21. eXtensible Access Control Markup Language, OASIS Technical Committee. Retrieved April 30, 2005, from http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml
22. Ferraiolo, D., Kuhn, D., & Chandramouli, R. (2003). Role-based access control. Norwood, MA: Artech House.
23. Heflin, J. (2001). Towards the Semantic Web: Knowledge representation in a dynamic distributed environment. Unpublished doctoral thesis, University of Maryland, College Park.
24. Heflin, J., Hendler, J., & Luke, S. (1988). Reading between the lines: Using SHOE to discover implicit knowledge from the Web. Proceedings of the AAAI-98 Workshop on AI and Information Integration, Madison, WI.
25. Hendler, J. (2004). An OWL full ontology for creating proof instances on the World Wide Web. Manuscript submitted for publication.
26. Horrocks, I., Patel-Schneider, P., Boley, H., Tabet, S., Macgregor, R., Grosof, B., & Dean, M. (2003). SWRL: A Semantic Web rule language combining OWL and RuleML, version 0.5. Retrieved April 30, 2005, from http://www.daml.org/rules/proposal/
27. Kagal, L., Paoucci, M., Srinivasan, N., Denker, G., Finin, T., & Sycara, K. (2004, July). Authorization and privacy for Semantic Web services. IEEE Intelligent Systems (Special Issue on Semantic Web Services).
28. Kifer, M., & Subrahmanian, V.S. (1989). On the expressive power of annotated logic programs. In E.L. Lusk, & R.A. Overbeek (Eds.), Proceedings of the North American Conference on Logic Programming (pp. 1069-1089).
29. Knowledge Interchange Format. Retrieved April 30, 2005, from http://logic.stanford.edu/kif/kif.html
30. Kyte, T. (2000, August). Fine grained access control (aka DBMS_RLS). Retrieved April 30, 2005, from http://govt.oracle.com/~tkyte/article2/index.html
31. Menzel, C., & Hayes, P. (2003). Standard common logic. Retrieved April 30, 2005, from http://ceur-ws.org/Vol-82/SI_paper_12.pdf
32. Ott, A. (2001). The rule set based access control (RSBAC) Linux kernel security extension. Proceedings of the International Linux Congress, November, Enschede, The Netherlands.
33. OWL Web Ontology Language Semantics and Abstract Syntax, W3C Recommendation. Retrieved April 30, 2005, from http://www.w3.org/TR/owl-semantics/
34. Pandey, R., & Hashli, B. (1999). Providing fine-grained access control for Java programs. Concurrency: Practice and Experience.
35. Pinheiro da Silva, P., McGuinness, D., & McCool, R. (2003). Knowledge provenance infrastructure. IEEE Data Engineering Bulletin, 26(4), 26-32.
36. The Platform for Privacy Preferences 1.1 (P3P1.1) Specification, W3C Working Draft. Retrieved April 30, 2005, from http://www.w3.org/TR/P3P11/
37. PORTIA: Privacy, Obligations, and Rights in Technologies of Information Assessment. Retrieved April 30, 2005, from http://crypto.stanford.edu/portia/- see also: Dan Boneh, Joan Feigenbaum, Avi Silberschatz, and Rebecca Wright, to appear in the Bulletin of the IEEE Computer Society Technical Committee on Data Engineering, 2004.
38. RDF Semantics, W3C Recommendation. Retrieved April 30, 2005, from http://www.w3.org/TR/rdf-mt/
39. Reno vs. ACLU, 521 US 844 (1997). Retrieved April 30, 2005, from http://supct.law.cornell.edu/supct/html/96-511.ZO.html
40. Restall, G. (1993). Simplified semantics for relevant logics (and some of their rivals). Journal of Philosophical Logic, XXII, 481-511.
41. Routley, R., Plumwood, V., Meyer, R.K., & Brady, R.T. (1982). Relevant logics and their rivals. Atascadero, CA: Ridgeview.
42. The Rule ML Initiative. Retrieved April 30, 2005, from http://www.ruleml.org/. See also [BoTW01].
43. Sandhu, R., Coyne, E., Feinstein, H., & Youman, C. (1996). Role-based access control models. IEEE Computer, 29(2), 38-47.
44. Schotch, P.K., & Jennings, R.E. (1980). Inference and necessity. Journal of Philosophical Logic, IX, 327-340.
45. Schunter, M. (Ed.). (n.d.). The enterprise privacy authorization language. IBM Corp. Retrieved April 30, 2005, from http://www.zurich.ibm.com/security/enterprise-privacy/epal/Specification/index.html
46. The Security Assertion Markup Langauge, OASIS Technical Committee. Retrieved April 30, 2005, from http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security
47. Shamir, A. (1985). Identity-based cryptosystems and signature schemes. Advances in Cryptology-CRYPTO '84, LNCS 196, 47-53.
48. Simple Distributed Security Infrastructure. Retrieved April 30, 2005, from http://theory.lcs.mit.edu/~cis/sdsi.html
49. Simple Public Key Infrastructure (open-source project). Retrieved April 30, 2005, from http://sourceforge.net/projects/spki/
50. Subrahmanian, V.S. (1994). Amalgamating knowledge bases. Transactions on Database Systems, 19(2), 291-331.
51. nd Annual Digital Cities Workshop, October, Kyoto, Japan.
52. Weitzner, D. (2000, May). Testimony before the United States Senate Commerce Committee Hearing on Online Privacy.
53. Weitzner, D. (2004). The transparency paradox: Privacy design strategies for open information networks [Extended Abstract]. Retrieved April 30, 2005, from http://www.w3.org/2004/05/loc-priv-transparencyextab.html