A framework for organisational control principles

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2002-January, Issue , 2002, Pages 229-238

  Schaad, Andreas ^a   Moffett, Jonathan D ^a  

^a UNIVERSITY OF YORK   (United Kingdom)

Author keywords

Application software; Authorization; Computer science; Computer security; Computerized monitoring; Control systems; History; Joining processes; Organizational aspects; Specification languages

Indexed keywords

APPLICATION PROGRAMS; COMPUTATIONAL LINGUISTICS; COMPUTER SCIENCE; CONTROL SYSTEMS; HISTORY; NETWORK SECURITY; SECURITY OF DATA; SECURITY SYSTEMS; SPECIFICATION LANGUAGES; SPECIFICATIONS;

AUTHORIZATION; BUSINESS GOALS; CONSTRAINT ANALYSIS; CONTROL PRINCIPLE; DISTRIBUTED SYSTEMS; JOINING PROCESS; ORGANIZATIONAL ASPECTS; SEPARATION OF DUTY;

COMPUTER CONTROL SYSTEMS;

EID: 84948981652     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2002.1176294     Document Type: Conference Paper

References (16)

1. Sandhu, R., et al., Role-based access control models. IEEE Computer, 1996. 29(2): p. 38-47
2. Damianou, N., et al. The Ponder Policy Specification Language. in Policies for Distributed Systems and Networks. 2001. Bristol: Springer Lecture Notes in Computer Science
3. Jackson, D. A Micromodularity Mechanism. in 8th Joint Software Engineering Conference. 2001. Vienna, Austria
4. Merton, R., "Bureacratic structure and personality", in Reader in Bureaucracy, R. Merton, et al., Editors. 1952, Free Press: New York. p. 361-71
5. Moeller, R., Changing definitions of Internal Control and Information Systems Integrity, in Integrity and Internal Control in Information Systems. 1997, Chapman&Hall. p. 255-272
6. Urwick, L., Notes on the Theory of Organization. 1952: American Management Association
7. Kuhn, R. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems. in Proceedings of the second ACM workshop on Role-based access control. 1997
8. Simon, R. and M. Zurko. Separation of Duty in Role-Based Environments. in Computer Security Foundations Workshop X. 1997. Rockport, Massachusetts
9. Gligor, V., S. Gavrila, and D. Ferraiolo. On the Formal Definition of Separation-of-Duty Policies and their Composition. in IEEE Symposium on Security and Privacy. 1998. Oakland, CA
10. Harrison, M., W. Ruzzo, and J. Ullman, Protection in Operating Systems. Communications of the ACM, 1976. 19(8): p. 461-471
11. Sloman, M. and J. Moffett, eds. Delegation of Authority. Integrated Network Management II, ed. I. Krishnan, Zimmer, W. 1991. 595-606
12. Hagstrom, A., et al. Revocations-A Categorization. in Computer Security Foundations Workshop. 2001: IEEE Press
13. Zhang, L., G. Ahn, and C. B. A Rule-based Framework for Role-Based Delegation. in ACM SACMAT. 2001. Chantilly, VA, USA
14. Sandhu, R., V. Bhamidipati, and Q. Munawer, The ARBAC97 model for role-based administration of roles. ACM Transactions. Inf. Syst. Security, 1999. 2(1): p. 105-135
15. Barka, E. and R. Sandhu. Framework for Role-Based Delegation Models. in Annual Computer Security Applications Conference. 2000. New Orleans
16. Schaad, A. and J. Moffett. Delegation of Obligations. in 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY 2002). 2002. Monterey, CA