The ARBAC99 model for administration of roles

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn Part F133431, Issue , 1999, Pages 229-238

  Sandhu, Ravi ^a   Munawer, Qamar ^a  

^a GEORGE MASON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

ACCESS CONTROL TECHNOLOGIES; DECENTRALIZED ADMINISTRATION; FORMAL DEFINITION; LARGE SYSTEM; ROLE-BASED ACCESS CONTROL; SECURITY ADMINISTRATOR; SUBMODELS; USER ROLES;

ACCESS CONTROL;

EID: 84977755884     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.1999.816032     Document Type: Conference Paper

References (13)

1. [BFA99] Elisa Bertino, Elena Ferrari, and Vijay Atluri. Specification and enforcement of authorization constraints in workflow management systems. A CM Transactions on Information and System Security, 2(1), February 1999.
2. [FBK99] David F. Ferraiolo, John F. Barkley, and D. Richard Kuhn. A role based access control model and reference implementation within a corporate intranet. A CM Transactions on Information and System Security, 2(1), February 1999.
3. [GGF98] Virgil D. Gligor, Serban I. Gavrila, and David Ferraiolo. On the formal definition of separation-of-duty policies and their composition. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 172-183, Oakland, CA, May 1998.
4. [N099] Matunda Nyanchama and Sylvia Osborn. The role graph model and conflict of interest. A CM Transactions on Information and System Security, 2(1), February 1999.
5. [SA98a] Ravi Sandhu and Gail-Joon Ahn. Decentralized group hieraches in unix: An experiment and lessons learned. In Proceedings of 21st NIST-NCSC National Information Systems Security Conference, Arlington, VA, October 5-8 1998.
6. [SA98b] Ravi Sandhu and Gail-Joon Ahn. Group hierarchies with decentralized user assignment in Windows NT. In Proc. International Association of Science and Technology for Development (IASTED) Conference on Software Engineering, Las Vegas, Nevada, October 1998.
7. [San98] Ravi Sandhu. Role-based access control. I n Zelkowitz, editor, Advances in Computers, Volume: 46. Academic Press, 1998.
8. [SB97] Ravi Sandhu and Venkata Bhamidipati. The URA97 model for role-based administration of user-role assignment. In T. Y. Lin and Xiaolei Qian, editors, Database Security XI: Status and Prospects. North-Holland, 1997.
9. [SB99] Ravi S. Sandhu and Venkata Bhamidipati. Role-based administration of user-role assignment: The URA97 model and its Oracle implementation. The Journal Of Computer Security, 1999. in press.
10. [SBM99] Ravi Sandhu, Venkata Bhamidipati, and Qamar Munawer. The ARBAC97 model for role-based administration of roles. A CM Transactions on Information and System Security, 2(1), February 1999.
11. [SCFY96] Ravi S. Sandhu, Edward J. Coyne, Hal L. Feinstein, and Charles E. Youman. Role-based access control models. IEEE Computer, 29(2):38-47, February 1996.
12. [SP98] Ravi Sandhu and Joon Park. Decentralized user-role assignment for web-based intranets. In Proceedings of 3rd ACM Workshop on Role-Based Access Control, pages 1-12, Fairfax, VA, October 22-23 1998. ACM.
13. [ZSS99] M. Zurko, R. Simon, and T. Sanfilippo. A user-centered modular authorization service built on an rbac foundation. In Proceedings of IEEE Symposium on Research in Security and Privacy, pages 57-71, Oakland, CA, May 1999.