NDLI: Sorting out role based access control

Please wait, while we are loading the content...

A bodyguard of lies: the use of honey objects in information security

Hardware-enhanced distributed access enforcement for role-based access control

Anomaly detection and visualization in generative RBAC models

Towards more usable information flow policies for contemporary operating systems

Game theoretic analysis of multiparty access control in online social networks

What are the most important challenges for access control in new computing domains, such as mobile, cloud and cyber-physical systems?

Limiting access to unintentionally leaked sensitive documents using malware signatures

Towards fine grained RDF access control

Re-thinking networked privacy, security, identity and access control in our surveillance states

Path conditions and principal matching: a new approach to access control

An access control concept for novel automotive HMI systems

Reduction of access control decisions

Attribute based access control for APIs in spring security

Scalable and precise automated analysis of administrative temporal role-based access control

Optimized and controlled provisioning of encrypted outsourced data

Redaction based RDF access control language

An actor-based, application-aware access control evaluation framework

Monitor placement for large-scale systems

Sorting out role based access control

Comprehensive integrity protection for desktop linux

Access control models for geo-social computing systems

User-centric identity as a service-architecture for eIDs with selective attribute disclosure

A system for risk awareness during role mining

Policy models to protect resource retrieval

Sorting out role based access control

Content Provider	ACM Digital Library
Author	Ermolaev, Victor Kuijper, Wouter
Abstract	Role-based access control (RBAC) is a popular framework for modelling access control rules. In this paper we identify a fragment of RBAC called bi-sorted role based access control (RBAC). We start from the observation that "classic" RBAC blends together subject management aspects and permission management aspects into a single object of indirection: a role. We posit there is merit in distinguishing these administrative perspectives and consequently introducing two distinct objects of indirection: the proper role (which applies solely to subjects) and the demarcation (which applies solely to permissions). We then identify a third administrative perspective called access management where the two are linked up. In this way we enhance organisational scalability by decoupling the tasks of maintaining abstractions over the set of subjects (assignment of subjects into proper roles), maintaining abstractions over the set of permissions (assignment of permissions into demarcations), and maintaining abstract access control policy (granting proper roles access to demarcations). Moreover, the latter conceptual refinement naturally leads us to the introduction of negative roles (and, dually, negative demarcations). The relevance of the four-sorted extension called polarized, bi-sorted role based access control (RpmBAC), in a semantic sense, is further supported by the existence of Galois connections between sets of subjects and permissions and between positive and negative roles.
Starting Page	63
Ending Page	74
Page Count	12
File Format	PDF
ISBN	9781450329392
DOI	10.1145/2613087.2613101
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-06-25
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Negative specification Physical access control Rbac Scalability Positive specification Organizational structure Domain specific languages Galois connections
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Role-based access control: A corrected and simplified specification (2005)

GemRBAC-DSL: A High-level Specification Language for Role-based Access Control Policies

G.: Administration of an RBAC System (2004)

Towards Managed Role Explosion

Push-based XML access control policy languages: A review

Rule-based rbac with negative authorization.

Start Here: Engineering Scalable Access Control Systems

Formal Specification for Role Based Access Control User/Role and Role/Role Relationship Management (1998)

Modeling role-based access control using parameterized UML models (2004)

Sorting out role based access control

Similar Documents

Role-based access control: A corrected and simplified specification (2005)

GemRBAC-DSL: A High-level Specification Language for Role-based Access Control Policies

G.: Administration of an RBAC System (2004)

Towards Managed Role Explosion

Push-based XML access control policy languages: A review

Rule-based rbac with negative authorization.

Start Here: Engineering Scalable Access Control Systems

Formal Specification for Role Based Access Control User/Role and Role/Role Relationship Management (1998)

Modeling role-based access control using parameterized UML models (2004)

Sorting out role based access control