Going Beyond MAC and DAC Using Mobile Policies

IFIP Advances in Information and Communication Technology

Volumn 65, Issue , 2002, Pages 245-260

  Fayad, Amgad ^a   Jajodia, Sushil ^a   Faatz, Don ^a   Doshi, Vinti ^a  

^a MITRE CORPORATION   (United States)

Author keywords

Access control; Attribute certificates; Dbms security; Middleware security; Mobile policy; PKI

Indexed keywords

DATA HANDLING; HIGH LEVEL LANGUAGES; MIDDLEWARE;

ACCESS CONTROL MECHANISM; ATTRIBUTE CERTIFICATE; CONTROL REQUIREMENTS; DISCRETIONARY ACCESS CONTROL; MANDATORY ACCESS CONTROL; MIDDLEWARE SECURITY; MOBILE POLICIES; PKI;

ACCESS CONTROL;

EID: 84904250030     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (13)

1. M. D. Abrams, "Renewed understanding of access control policies" Proc. National Computer Security Conf., 1993.
2. M. D. Abrams, K. E. Eggers, L. J. Lapadula, and I. M. Olson, "A generalized framework for access control" Proc. National Computer Security Conf., October 1990.
3. M. D. Abrams, J. Heaney, O. King, L. J. LaPadula, M. Lazear, and I. M. Olson, "Generalized framework for access control: Towards prototyping the ORCON policy" Proc. National Computer Security Conf., October 1991.
4. th IFIP 11.3 Working Conference on Database Security, Schoorl, Netherlands, August 2000.
5. V. Doshi, A. Fayad, S. Jajodia, and R. Maclean, "Using Attribute Certificates and Mobile Policies in Electronic Commerce Applications" Proc. 16th Annual Computer Security Applications Conference, New Orleans, LA, December 2000.
6. S. Farrell and R. Housley, "An Internet Attribute Certificate Profile for Authorization" PKIX Working Group, Internet-Draft, March 2000.
7. T. D. Graubart, "on the need for a third form of access control" Proc. National Computer Security Conf., October 1989.
8. R. Housley, W. Ford, T. Polk, and D. Solo, "Internet Public Key Infrastructure - X.509 Certificate and CRL profile" RFC 2459, January 1999.
9. ITU-T Recommendation X.509 (1197 E): Information Technology - Open Systems Interconnection - The Directory: Authentication Framework, June 1997.
10. S. Jajodia, M. Kudo, and V. S. Subrahmanian, "Provisional authorizations" Proc. 1st Workshop on Security and Privacy in E-Commerce, Athens, Greece, November 2000.
11. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino, "A Unified Framework for Enforcing Multiple Access Control Policies" Proc. ACM SIGMOD Int'l. Conference on Management of Data, May 1997, pages 474-485.
12. S. Jajodia, P. Samarati, and V. S. Subrahmanian, "A logical language for expressing authorizations" Proc. IEEE Symp. on Research in Security and Privacy, Oakland, Calif., May 1997, pages 31-42.
13. C. J. McCollum, J. R. Messing, and L. Notargiacomo, "Beyond the Pale of MAC and DAC - Defining new forms of access control" Proc. IEEE Symp. on Security and Privacy, 1990, pages 190-200.