IFIP
2010
Springer
13 years 6 months ago
2010
Springer
Many cryptographic schemes have been designed to enforce information flow policies. However, enterprise security requirements are often better encoded, or can only be encoded, usin...
SERP
2010
13 years 9 months ago
2010
- In large enterprises subject to constant employee turnover and challenging security policies, the administration of Role-based Access Control (RBAC) is a daunting task that is of...
SAC
2008
ACM
13 years 11 months ago
2008
ACM
In recent years role-based access control (RBAC) has been spreading within organizations. However, companies still have considerable difficulty migrating to this model, due to the...
GRID
2007
Springer
13 years 11 months ago
2007
Springer
In this paper, we present a role-based access control method for accessing databases through the Open Grid Services Architecture – Data Access and Integration (OGSA-DAI) framewor...
CORR
2008
Springer
13 years 11 months ago
2008
Springer
This paper offers several contributions for separation of duty (SoD) administration in role-based access control (RBAC) systems. We first introduce a new formal framework, based o...
SEC
2000
14 years 23 days ago
2000
: Role-based access control associates roles with privileges and users with roles. Changes to these associations are infrequent and explicit. This may not reflect business requirem...
IADIS
2003
14 years 24 days ago
2003
Hypermedia systems (whether web sites or not) should support multilevel policiesm, offering different views and manipulation abilities of the same information to users with differ...
ESORICS
2006
Springer
14 years 3 months ago
2006
Springer
User delegation is a mechanism for assigning access rights available to a user to another user. A delegation operation can either be a grant or transfer operation. Delegation for r...
CCS
2007
ACM
14 years 3 months ago
2007
ACM
Administrative RBAC (ARBAC) policies specify how Role-Based Access Control (RBAC) policies may be changed by each administrator. It is often difficult to fully understand the effe...
WETICE
1996
IEEE
14 years 3 months ago
1996
IEEE
This paper describes a security architecture designed to support role-based access control for distributed object systems in a large-scale, multi-organisational enterprise in whic...