A Transitive Access Control Model for Dynamic Roles and Attributes

Mark P Evered

doi:10.1109/CyberSec.2012.6246105

A Transitive Access Control Model for Dynamic Roles and Attributes

Mark P Evered

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

Original language	English
Title of host publication	Proceedings of the International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec)
Place of Publication	Los Alamitos, United States of America
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	128-132
ISBN (Print)	9781467314244
DOIs	https://doi.org/10.1109/CyberSec.2012.6246105
Publication status	Published - 2012
Event	CyberSec 2012: International Conference on Cyber Security, Cyber Warfare and Digital Forensic - Kuala Lumpur, Malaysia Duration: 26 Jun 2012 → 28 Jun 2012

Conference

Conference	CyberSec 2012: International Conference on Cyber Security, Cyber Warfare and Digital Forensic
City	Kuala Lumpur, Malaysia
Period	26/06/12 → 28/06/12

Keywords

Computer System Security

Access to Document

10.1109/CyberSec.2012.6246105

https://hdl.handle.net/1959.11/11854

Handle.net

Persistent link

Cite this

@inproceedings{717b162cfe5f4aea9c05101b47f3ef99,

title = "A Transitive Access Control Model for Dynamic Roles and Attributes",

abstract = "Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.",

keywords = "Computer System Security",

author = "Evered, \{Mark P\}",

year = "2012",

doi = "10.1109/CyberSec.2012.6246105",

language = "English",

isbn = "9781467314244",

pages = "128--132",

booktitle = "Proceedings of the International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec)",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

note = "CyberSec 2012: International Conference on Cyber Security, Cyber Warfare and Digital Forensic ; Conference date: 26-06-2012 Through 28-06-2012",

}

Evered, MP 2012, A Transitive Access Control Model for Dynamic Roles and Attributes. in Proceedings of the International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec). Institute of Electrical and Electronics Engineers (IEEE), Los Alamitos, United States of America, pp. 128-132, CyberSec 2012: International Conference on Cyber Security, Cyber Warfare and Digital Forensic, Kuala Lumpur, Malaysia, 26/06/12. https://doi.org/10.1109/CyberSec.2012.6246105

A Transitive Access Control Model for Dynamic Roles and Attributes. / Evered, Mark P.
Proceedings of the International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec). Los Alamitos, United States of America: Institute of Electrical and Electronics Engineers (IEEE), 2012. p. 128-132.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A Transitive Access Control Model for Dynamic Roles and Attributes

AU - Evered, Mark P

PY - 2012

Y1 - 2012

N2 - Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

AB - Role-based access control (RBAC) has gained popularity for the expression of access constraints in information systems but existing RBAC models do not provide sufficient expressive power to support the kinds of fine-grained access control often required. In this paper, we define a new formal model for RBAC which supports controlled role appointment and transitions, object attributes analogous to subject roles and a transitive role/attribute derivation relationship.

KW - Computer System Security

U2 - 10.1109/CyberSec.2012.6246105

DO - 10.1109/CyberSec.2012.6246105

M3 - Conference contribution

SN - 9781467314244

SP - 128

EP - 132

BT - Proceedings of the International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec)

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Los Alamitos, United States of America

T2 - CyberSec 2012: International Conference on Cyber Security, Cyber Warfare and Digital Forensic

Y2 - 26 June 2012 through 28 June 2012

ER -

A Transitive Access Control Model for Dynamic Roles and Attributes

Abstract

Conference

Keywords

Access to Document

Handle.net

Fingerprint

Cite this