A Formal Semantic Model for the Access Specification Language RASP

Mark P Evered

A Formal Semantic Model for the Access Specification Language RASP

Mark P Evered

Computer Science

Research output: Contribution to journal › Article › peer-review

Abstract

The access specification language RASP extends traditional role-based access control (RBAC) concepts to provide greater expressive power often required for fine-grained access control in sensitive information systems. Existing formal models of RBAC are not sufficient to describe these extensions. In this paper, we define a new model for RBAC which formalizes the RASP concepts of controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

Original language	English
Pages (from-to)	152-159
Journal	International Journal of Cyber-Security and Digital Forensics
Volume	1
Issue number	2
Publication status	Published - 2012

Keywords

Computer System Security

Access to Document

https://hdl.handle.net/1959.11/11846

Handle.net

Persistent link

Cite this

@article{2a8fc5c8bd6646179e2a30b792df1df0,

title = "A Formal Semantic Model for the Access Specification Language RASP",

abstract = "The access specification language RASP extends traditional role-based access control (RBAC) concepts to provide greater expressive power often required for fine-grained access control in sensitive information systems. Existing formal models of RBAC are not sufficient to describe these extensions. In this paper, we define a new model for RBAC which formalizes the RASP concepts of controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.",

keywords = "Computer System Security",

author = "Evered, \{Mark P\}",

year = "2012",

language = "English",

volume = "1",

pages = "152--159",

journal = "International Journal of Cyber-Security and Digital Forensics",

issn = "2305-0012",

publisher = "Society of Digital Information and Wireless Communications (SDIWC)",

number = "2",

}

TY - JOUR

T1 - A Formal Semantic Model for the Access Specification Language RASP

AU - Evered, Mark P

PY - 2012

Y1 - 2012

N2 - The access specification language RASP extends traditional role-based access control (RBAC) concepts to provide greater expressive power often required for fine-grained access control in sensitive information systems. Existing formal models of RBAC are not sufficient to describe these extensions. In this paper, we define a new model for RBAC which formalizes the RASP concepts of controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

AB - The access specification language RASP extends traditional role-based access control (RBAC) concepts to provide greater expressive power often required for fine-grained access control in sensitive information systems. Existing formal models of RBAC are not sufficient to describe these extensions. In this paper, we define a new model for RBAC which formalizes the RASP concepts of controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

KW - Computer System Security

UR - http://sdiwc.net/digital-library/web-admin/upload-pdf/00000302.pdf

M3 - Article

SN - 2305-0012

VL - 1

SP - 152

EP - 159

JO - International Journal of Cyber-Security and Digital Forensics

JF - International Journal of Cyber-Security and Digital Forensics

IS - 2

ER -

A Formal Semantic Model for the Access Specification Language RASP

Abstract

Keywords

Access to Document

Handle.net

Fingerprint

Cite this