Specification of Role and Attribute Transitions for Secure Information System Access

Mark P Evered

doi:10.1109/DICTAP.2012.6215380

Specification of Role and Attribute Transitions for Secure Information System Access

Mark P Evered

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

In this paper, we describe a formal specification language (RASP) for expressing fine-grained access control constraints in information systems. The design of the language is motivated by two HIS case studies which demonstrate the complexity of the access constraints which arise if minimal (need-to-know) access is to be strictly enforced. RASP supports modularity, parameterization, role acquisition, constraint expressions and a symmetrical approach to role transitions and attribute transitions. No existing access control specification language supports all of these complex, realistic requirements.

Original language	English
Title of host publication	Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP)
Place of Publication	Los Alamitos, United States of America
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	230-235
ISBN (Print)	9781467307321, 9781467307345, 9781467307338
DOIs	https://doi.org/10.1109/DICTAP.2012.6215380
Publication status	Published - 2012
Event	DICTAP 2012: The Second International Conference on Digital Information and Communication Technology and its Applications - Bangkok, Thailand Duration: 16 May 2012 → 18 May 2012

Conference

Conference	DICTAP 2012: The Second International Conference on Digital Information and Communication Technology and its Applications
City	Bangkok, Thailand
Period	16/05/12 → 18/05/12

Keywords

Computer System Security

Access to Document

10.1109/DICTAP.2012.6215380

https://hdl.handle.net/1959.11/11847

Handle.net

Persistent link

Cite this

@inproceedings{780722352e294a8d8f69fd7bdc755eef,

title = "Specification of Role and Attribute Transitions for Secure Information System Access",

abstract = "In this paper, we describe a formal specification language (RASP) for expressing fine-grained access control constraints in information systems. The design of the language is motivated by two HIS case studies which demonstrate the complexity of the access constraints which arise if minimal (need-to-know) access is to be strictly enforced. RASP supports modularity, parameterization, role acquisition, constraint expressions and a symmetrical approach to role transitions and attribute transitions. No existing access control specification language supports all of these complex, realistic requirements.",

keywords = "Computer System Security",

author = "Evered, \{Mark P\}",

year = "2012",

doi = "10.1109/DICTAP.2012.6215380",

language = "English",

isbn = "9781467307321",

pages = "230--235",

booktitle = "Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP)",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

note = "DICTAP 2012: The Second International Conference on Digital Information and Communication Technology and its Applications ; Conference date: 16-05-2012 Through 18-05-2012",

}

Evered, MP 2012, Specification of Role and Attribute Transitions for Secure Information System Access. in Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP). Institute of Electrical and Electronics Engineers (IEEE), Los Alamitos, United States of America, pp. 230-235, DICTAP 2012: The Second International Conference on Digital Information and Communication Technology and its Applications, Bangkok, Thailand, 16/05/12. https://doi.org/10.1109/DICTAP.2012.6215380

Specification of Role and Attribute Transitions for Secure Information System Access. / Evered, Mark P.
Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP). Los Alamitos, United States of America: Institute of Electrical and Electronics Engineers (IEEE), 2012. p. 230-235.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Specification of Role and Attribute Transitions for Secure Information System Access

AU - Evered, Mark P

PY - 2012

Y1 - 2012

N2 - In this paper, we describe a formal specification language (RASP) for expressing fine-grained access control constraints in information systems. The design of the language is motivated by two HIS case studies which demonstrate the complexity of the access constraints which arise if minimal (need-to-know) access is to be strictly enforced. RASP supports modularity, parameterization, role acquisition, constraint expressions and a symmetrical approach to role transitions and attribute transitions. No existing access control specification language supports all of these complex, realistic requirements.

AB - In this paper, we describe a formal specification language (RASP) for expressing fine-grained access control constraints in information systems. The design of the language is motivated by two HIS case studies which demonstrate the complexity of the access constraints which arise if minimal (need-to-know) access is to be strictly enforced. RASP supports modularity, parameterization, role acquisition, constraint expressions and a symmetrical approach to role transitions and attribute transitions. No existing access control specification language supports all of these complex, realistic requirements.

KW - Computer System Security

UR - https://www.scopus.com/pages/publications/84863643245

U2 - 10.1109/DICTAP.2012.6215380

DO - 10.1109/DICTAP.2012.6215380

M3 - Conference contribution

SN - 9781467307321

SN - 9781467307345

SN - 9781467307338

SP - 230

EP - 235

BT - Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP)

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Los Alamitos, United States of America

T2 - DICTAP 2012: The Second International Conference on Digital Information and Communication Technology and its Applications

Y2 - 16 May 2012 through 18 May 2012

ER -

Evered MP. Specification of Role and Attribute Transitions for Secure Information System Access. In Proceedings of the Second International Conference on Digital Information and Communication Technology and it's Applications (DICTAP). Los Alamitos, United States of America: Institute of Electrical and Electronics Engineers (IEEE). 2012. p. 230-235 doi: 10.1109/DICTAP.2012.6215380

Specification of Role and Attribute Transitions for Secure Information System Access

Abstract

Conference

Keywords

Access to Document

Handle.net

Fingerprint

Cite this