Flexible Enterprise Access Control with Object-oriented View Specification

Mark Peter Evered

Flexible Enterprise Access Control with Object-oriented View Specification

Mark Peter Evered

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

The per-method access control lists of standard middleware technologies allow only simple forms of access control to be expressed and enforced. Given the increasing use of web-based applications involving sensitive data, the increased threat and the stringent requirements of privacy laws, a more flexible and secure approach is needed. In this paper we present a three-step approach to access control involving object-oriented encapsulation, middleware based on a new, more secure access control mechanism and the high-level specification of method oriented views. We demonstrate the use of the approach in a simple web-based E-commerce environment to provide secure electronic cheques.

Original language	English
Title of host publication	ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing
Editors	Chris Johnson, Paul Montague, Chris Steketee
Place of Publication	Darlinghurst, Australia
Publisher	Australian Computer Society (ACS)
Pages	17-24
ISBN (Print)	0920682007
Publication status	Published - 2003
Event	AISW 2003: Australasian Information Security Workshop (AISW) and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (WICAPUC) - Adelaide, Australia Duration: 28 Feb 2003 → …

Conference

Conference	AISW 2003: Australasian Information Security Workshop (AISW) and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (WICAPUC)
City	Adelaide, Australia
Period	28/02/03 → …

Keywords

Data Format

Access to Document

https://hdl.handle.net/1959.11/4679

Handle.net

Persistent link

Cite this

Evered, M. P. (2003). Flexible Enterprise Access Control with Object-oriented View Specification. In C. Johnson, P. Montague, & C. Steketee (Eds.), ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (pp. 17-24). Australian Computer Society (ACS). https://hdl.handle.net/1959.11/4679

Evered, Mark Peter. / Flexible Enterprise Access Control with Object-oriented View Specification. ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing. editor / Chris Johnson ; Paul Montague ; Chris Steketee. Darlinghurst, Australia : Australian Computer Society (ACS), 2003. pp. 17-24

@inproceedings{d2a9b517bcf746d9baab45a118c2c1b1,

title = "Flexible Enterprise Access Control with Object-oriented View Specification",

abstract = "The per-method access control lists of standard middleware technologies allow only simple forms of access control to be expressed and enforced. Given the increasing use of web-based applications involving sensitive data, the increased threat and the stringent requirements of privacy laws, a more flexible and secure approach is needed. In this paper we present a three-step approach to access control involving object-oriented encapsulation, middleware based on a new, more secure access control mechanism and the high-level specification of method oriented views. We demonstrate the use of the approach in a simple web-based E-commerce environment to provide secure electronic cheques.",

keywords = "Data Format",

author = "Evered, \{Mark Peter\}",

year = "2003",

language = "English",

isbn = "0920682007",

pages = "17--24",

editor = "Chris Johnson and Paul Montague and Chris Steketee",

booktitle = "ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing",

publisher = "Australian Computer Society (ACS)",

note = "AISW 2003: Australasian Information Security Workshop (AISW) and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (WICAPUC) ; Conference date: 28-02-2003",

}

Evered, MP 2003, Flexible Enterprise Access Control with Object-oriented View Specification. in C Johnson, P Montague & C Steketee (eds), ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing. Australian Computer Society (ACS), Darlinghurst, Australia, pp. 17-24, AISW 2003: Australasian Information Security Workshop (AISW) and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (WICAPUC), Adelaide, Australia, 28/02/03. <https://hdl.handle.net/1959.11/4679>

Flexible Enterprise Access Control with Object-oriented View Specification. / Evered, Mark Peter.
ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing. ed. / Chris Johnson; Paul Montague; Chris Steketee. Darlinghurst, Australia: Australian Computer Society (ACS), 2003. p. 17-24.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Flexible Enterprise Access Control with Object-oriented View Specification

AU - Evered, Mark Peter

PY - 2003

Y1 - 2003

N2 - The per-method access control lists of standard middleware technologies allow only simple forms of access control to be expressed and enforced. Given the increasing use of web-based applications involving sensitive data, the increased threat and the stringent requirements of privacy laws, a more flexible and secure approach is needed. In this paper we present a three-step approach to access control involving object-oriented encapsulation, middleware based on a new, more secure access control mechanism and the high-level specification of method oriented views. We demonstrate the use of the approach in a simple web-based E-commerce environment to provide secure electronic cheques.

AB - The per-method access control lists of standard middleware technologies allow only simple forms of access control to be expressed and enforced. Given the increasing use of web-based applications involving sensitive data, the increased threat and the stringent requirements of privacy laws, a more flexible and secure approach is needed. In this paper we present a three-step approach to access control involving object-oriented encapsulation, middleware based on a new, more secure access control mechanism and the high-level specification of method oriented views. We demonstrate the use of the approach in a simple web-based E-commerce environment to provide secure electronic cheques.

KW - Data Format

UR - http://crpit.com/confpapers/CRPITV21AEvered.pdf

UR - http://trove.nla.gov.au/work/24338941

M3 - Conference contribution

SN - 0920682007

SP - 17

EP - 24

BT - ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing

A2 - Johnson, Chris

A2 - Montague, Paul

A2 - Steketee, Chris

PB - Australian Computer Society (ACS)

CY - Darlinghurst, Australia

T2 - AISW 2003: Australasian Information Security Workshop (AISW) and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing (WICAPUC)

Y2 - 28 February 2003

ER -

Evered MP. Flexible Enterprise Access Control with Object-oriented View Specification. In Johnson C, Montague P, Steketee C, editors, ACSW Frontiers 2003: Proceedings of the Australasian Information Security Workshop and the Workshop on Wearable, Invisible, Context-Aware, Ambient, Pervasive and Ubiquitous Computing. Darlinghurst, Australia: Australian Computer Society (ACS). 2003. p. 17-24

Flexible Enterprise Access Control with Object-oriented View Specification

Abstract

Conference

Keywords

Access to Document

Handle.net

Fingerprint

Cite this