RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role-Based Access Control"

Authors:
David Ferraiolo;Rick Kuhn;Ravi Sandhu
Affiliations:
US National Institute of Standards and Technology;US National Institute of Standards and Technology;University of Texas at San Antonio
Venue:
IEEE Security and Privacy
Year:
2007

Citing 2
Cited 8

Role-Based Access Control Models

Computer
The NIST model for role-based access control: towards a unified standard

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control

RBAC-MAS and SODA: Experimenting RBAC in AOSE

Engineering Societies in the Agents World IX
A UML profile for role-based access control

Proceedings of the 2nd international conference on Security of information and networks
Suggested improvements to the DoDAF for modeling architectural security

SpringSim '09 Proceedings of the 2009 Spring Simulation Multiconference
A holistic approach for access control policies: from formal specification to aspect-based enforcement

International Journal of Information and Computer Security
Implementation of web-based platform for IC design and project management

ASID'09 Proceedings of the 3rd international conference on Anti-Counterfeiting, security, and identification in communication
Modeling and evaluating information leakage caused by inferences in supply chains

Computers in Industry
Access control for semantic data federations in industrial product-lifecycle management

Computers in Industry
A distributed collaborative product design environment based on semantic norm model and role-based access control

Journal of Network and Computer Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

As the authors of the original proposal for the role-based access control (RBAC) standard and developers of the models from which it derives, the authors respond here to Ninghui Li, Ji-Won Byun, and Elisa Bertino's critique, which also appears in this issue. This is an opportune time in the revision cycle to introduce proposals for changes to the standard.