Using description logic to determine seniority among RB-RBAC authorization rules

Authors:
Qi Xie;Dayou Liu;Haibo Yu
Affiliations:
College of Computer Science and Technology, Jilin University, Changchun, P.R. China;College of Computer Science and Technology, Jilin University, Changchun, P.R. China;College of Computer Science and Technology, Jilin University, Changchun, P.R. China
Venue:
RSKT'06 Proceedings of the First international conference on Rough Sets and Knowledge Technology
Year:
2006

Citing 9
Cited 0

Role-Based Access Control Models

Computer
Proposed NIST standard for role-based access control

ACM Transactions on Information and System Security (TISSEC)
The Ponder Policy Specification Language

POLICY '01 Proceedings of the International Workshop on Policies for Distributed Systems and Networks
Induced role hierarchies with attribute-based RBAC

Proceedings of the eighth ACM symposium on Access control models and technologies
A Model for Attribute-Based User-Role Assignment

ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
KAoS Policy and Domain Services: Toward a Description-Logic Approach to Policy Representation, Deconfliction, and Enforcement

POLICY '03 Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks
A Policy Language for a Pervasive Computing Environment

POLICY '03 Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks
The description logic handbook: theory, implementation, and applications

The description logic handbook: theory, implementation, and applications
Rule-Based RBAC with Negative Authorization

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.02

Visualization

Abstract

Rule-Based RBAC (RB-RBAC) provides the mechanism to dynamically assign users to roles based on authorization rules defined by security policy. In RB-RBAC, seniority levels of rules are also introduced to express domination relationship among rules. Hence, relations among attribute expressions may be quite complex and security officers may perform incorrect or unintended assignments if they are not aware of such relations behind authorization rules. We proposed a formalization of RB-RBAC by description logic. A seniority relation determination method is developed based on description logic reasoning services. This method can find out seniority relations efficiently even for rules without identical syntax structures