Role-Based Authorization Constraints Specification

ACM Transactions on Information and System Security

Volumn 3, Issue 4, 2000, Pages 207-226

  Ahn, Gail Joon ^a   Sandhu, Ravi ^b  

^a UNIVERSITY OF NORTH CAROLINA AT CHARLOTTE   (United States)

^b George Mason University   (United States)

Author keywords

Access control models; authorization constraints; constraints specification; Languages; role based access control; Security

Indexed keywords

EID: 84956993736     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/382912.382913     Document Type: Article

References (14)

1. Ahn, G.-J. 2000. The RCL 2000 language for specifying role-based authorization constraints. Ph.D. Dissertation. George Mason Univ., Fairfax, VA
2. Ahn, G. -J. and Sandhu, R. 1999. The RSL99 language for role-based separation of duty constraints. In Proceedings of 4th ACM Workshop on Role-Based Access Control (RBAC '99, Fairfax, VA, Oct. 28-29). ACM, New York, NY, 43-54
3. Chen, F. and Sandhu, R. S. 1995. Constraints for role-based access control. In Proceedings of the first ACM Workshop on Role-Based Access Control (RBAC '95, Gaithersburg, MD, Nov. 30-Dec. 1), C. E. Youman, R. S. Sandhu, and E. J. Coyne, Eds. ACM Press, New York, NY, 39-46
4. Giuri, L. and Iglio, P. 1996. A formal model for role-based access control with constraints. In Proceedings of 9th IEEE Workshop on Computer Security Foundations (Kenmare, Ireland, June). IEEE Press, Piscataway, NJ, 136-145
5. Gligor, V. D., Gavrila, S., and Ferraiolo, D. 1998. On the formal definition of separation-of-duty policies and their composition. In Proceedings of the 1998 IEEE Computer Society Symposium on Research in Security and Privacy (Oakland, CA, May). IEEE Computer Society Press, Los Alamitos, CA, 172-183
6. Jaeger, T. 1999. On the increasing importance of constraints. In Proceedings of 4th ACM Workshop on Role-Based Access Control (RBAC '99, Fairfax, VA, Oct. 28-29). ACM, New York, NY, 33-42
7. Kuhn, D. R. 1997. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems. In Proceedings of the Second ACM Workshop on Role-based Access Control (RBAC '97, Fairfax, VA, Nov. 6-7), C. Youman, E. Coyne, and T. Jaeger, Chairs. ACM Press, New York, NY, 23-30
8. Osborn, S., Sandhu, R., and Munawer, Q. 2000. Configuring role-based access control to enforce mandatory and discretionary access control policies. ACM Trans. Inf. Syst. Secur. 3, 2 (May)
9. Sandhu, R. S. 1993. Lattice-based access control models. IEEE Computer 26, 11, 9-19
10. Sandhu, R., Ferraiolo, D., and Kuhn, R. 2000. The NIST model for role-based access control: Towards a unified standard. In Proceedings of 5th ACM Workshop on Role-Based Access Control (RBAC '00, Berlin, Germany, July 26 - 27). ACM, New York, NY, 47-63
11. Sandhu, R. and Munawer, Q. 1998. How to do discretionary access control using roles. In Proceedings of the Third ACM Workshop on Role-Based Access Control (RBAC '98, Fairfax, VA, Oct. 22-23), C. Youman and T. Jaeger, Chairs. ACM Press, New York, NY, 47-54
12. Sandhu, R. S. 1996. Role hierarchies and constraints for lattice-based access controls. In Proceedings of the Fourth European Symposium on Research in Computer Security (ESO-RICS96, Rome, Italy, Sept. 25-27), E. Bertino, Ed. Springer-Verlag, New York, NY
13. Sandhu, R. S., Coyne, E. J., Feinstein, H. L., and Youman, C. E. 1996. Role-based access control models. IEEE Computer 29, 2 (Feb.), 38-47
14. Simon, R. and Zurko, M. E. 1997. Separation of duty in role based access control environments. In Proceedings of the 10th IEEE Workshop on Computer Security Foundations (Rockport, MA, June 10-12). IEEE Computer Society Press, Los Alamitos, CA, 183-194