The Authorization Service of Tivoli Policy Director

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2001-January, Issue , 2001, Pages 319-328

  Karjoth, Günter ^a  

^a IBM RESEARCH   (United States)

Author keywords

Access control; Access protocols; Authentication; Authorization; Logic; Protection; Resource management; Scalability; TCPIP; Web server

Indexed keywords

ACCESS CONTROL; APPLICATION PROGRAMMING INTERFACES (API); HTTP; INTERNET PROTOCOLS; SCALABILITY; SECURITY OF DATA; SECURITY SYSTEMS; TRANSMISSION CONTROL PROTOCOL;

ACCESS PROTOCOLS; AUTHORIZATION; LOGIC; PROTECTION; RESOURCE MANAGEMENT; TCPIP; WEB SERVERS;

AUTHENTICATION;

EID: 84949235953     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2001.991547     Document Type: Conference Paper

References (14)

1. T. Berners-Lee, R. Fielding, and L. Masinter. Uniform resource identifiers (URI): Generic syntax. RFC 2396, Aug. 1998
2. K. Beznosov, Y. Deng, B. Blakley, C. Burt, and J. Barkley. A resource access decision service for CORBA-based distributed systems. In 15th Annual Computer Security Applications Conference (ACSAC'99), pg. 310-319, 1999
3. M. Blaze, J. Feigenbaum, and A.D. Keromytis. KeyNote: Trust management for public-key infrastructures. In Security Protocols-6th Int'l Workshop, Lecture Notes in Computer Science 1550, pg. 59-66. Springer, 1999
4. S. Blount. Securing Your Insecurities on the Web. In 15th Annual Computer Security Applications Conference (ACSAC'99), 1999. www.acsac.org/1999/papers/ thu-c-1300-netegrity.pdf
5. S. Foley. Implementing Chinese Walls in Unix. Computers and Security Journal, 16(6):551-563, 1997
6. S. Jajodia, M. Kudo, and V.S. Subrahmanian. Provisional authorization. In Recent Advances in Secure and Private E-Commerce, Kluwer Academic Publishers, 2001
7. G. Karjoth. Authorization in CORBA security. Journal of Computer Security, 8(2/3):89-108, 2000
8. J. Pato. DCE Access Control Lists (ACL's). OSF DCE Specifications, 1990
9. M. Swift, C. Van Dyke, P. Brundrett, P. Garg, A. Hopkins, M. Goertzel, S. Chan, and G. Jensensworth. Improving the granularity of access control in Windows NT. In 6th ACM Symposium on Access Control Models and Technologies (SACMAT 2001), pg. 87-96, 2001
10. J. Snyder. The New Holy Grail? Information Security Magazine, Oct. 2000
11. The Open Group. Authorization (AZN) API. Open Group Technical Standard C908, Jan. 2000
12. V. Varadharajan, C. Crall, and J. Pato. Authorization in Enterprise-wide Distributed System-A Practical Design and Implementation. In 14th Annual Computer Security Applications Conference (ACSAC'98), 1998
13. T.Y.C. Woo and S.S. Lam. A Framework for Distributed Authorization. In 1st ACM Conference on Computer and Communications Security, pg. 112-118. ACM Press, 1993
14. M.E. Zurko, R. Simon and T. Sanfilippo. A user-centered modular authorization service built on RBAC foundation. 1999 IEEE Symposium on Security and Privacy, pg. 57-71. IEEE Computer Society, 1999