NDLI: Start Here: Engineering Scalable Access Control Systems

Please wait, while we are loading the content...

State-aware Network Access Management for Software-Defined Networks

Panel Security and Privacy in the Age of Internet of Things: Opportunities and Challenges

Enabling Dynamic Access Control for Controller Applications in Software-Defined Networks

Resiliency Policies in Access Control Revisited

On Completeness in Languages for Attribute-Based Access Control

A Space-Efficient Data Structure for Fast Access Control in ECM Systems

An Empirical Study on User Access Control in Online Social Networks

A Context-Aware System to Secure Enterprise Content

Start Here: Engineering Scalable Access Control Systems

Extended ReBAC Administrative Models with Cascading Revocation and Provenance Support

Boosting GSHADE Capabilities: New Applications and Security in Malicious Setting

An Application Restriction System for Bring-Your-Own-Device Scenarios

Detecting Privilege Escalation Attacks through Instrumenting Web Application Source Code

Policy Negotiation for Co-owned Resources in Relationship-Based Access Control

Formal Comparison of an Attribute Based Access Control Language for RESTful Services with XACML

A Framework of Multi-Authority Attribute-Based Encryption with Outsourcing and Revocation

Tri-Modularization of Firewall Policies

Data-Centric Access Control for Cloud Computing

Automated Fault Localization of XACML Policies

GemRBAC-DSL: A High-level Specification Language for Role-based Access Control Policies

PolyStream: Cryptographically Enforced Access Controls for Outsourced Data Stream Processing

Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability

Start Here: Engineering Scalable Access Control Systems

Content Provider	ACM Digital Library
Author	Knight, Scott Elliott, Aaron
Abstract	Role-based Access Control (RBAC) is a popular solution for implementing information security however there is no pervasive methodology used to produce scalable access control systems for large organizations with hundreds or thousands of employees. As a result ten engineers will likely arrive at ten different solutions to the same problem where there is no right or wrong answer but there is both an immediate and long term cost. Moreover, they would have difficulty communicating the important aspects of their design implementations to each other. This is an interesting deficiency because despite their diversity, large organizations are built upon two key concepts, roles and responsibilities, where a role like Departmental Chair is identified and assigned responsibilities. In this paper, our objective is to introduce ORGODEX, a new model and practical methodology for engineering scalable RBAC systems in large organizations where employees require access to information on a need to know basis. First, we motivate the requirement for a new RBAC dichotomy, distinguishing between roles and responsibilities. Next, we introduce our new model for describing and reasoning about RBAC systems with this new dichotomy. Finally, we produce a new iterative methodology for engineering scalable access control systems.
Starting Page	113
Ending Page	124
Page Count	12
File Format	PDF
ISBN	9781450338028
DOI	10.1145/2914642.2914651
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-06-06
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Scalability Organizational structure Least privilege Role-based access control Complexity
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards Managed Role Explosion

ROBAC: Scalable Role and Organization Based Access Control Models

Sorting out role based access control

The role-based access control system of a European bank: a case study and discussion

Access Rights Administration in Role-Based Security Systems (1994)

Access Rights Administration in Role-Based Security Systems (1994)

Poster: trans-organizational role-based access control

A scalable complexity specification for video applications

A cache considering role-based access control and trust in privilege management infrastructure

Start Here: Engineering Scalable Access Control Systems

Similar Documents

Towards Managed Role Explosion

ROBAC: Scalable Role and Organization Based Access Control Models

Sorting out role based access control

The role-based access control system of a European bank: a case study and discussion

Access Rights Administration in Role-Based Security Systems (1994)

Access Rights Administration in Role-Based Security Systems (1994)

Poster: trans-organizational role-based access control

A scalable complexity specification for video applications

A cache considering role-based access control and trust in privilege management infrastructure

Start Here: Engineering Scalable Access Control Systems