A flexible authorization framework for e-commerce

Authors:
Sushil Jajodia;Duminda Wijesekera
Affiliations:
Center for Secure Information Systems, George Mason University, Fairfax, VA;Center for Secure Information Systems, George Mason University, Fairfax, VA
Venue:
ICDCIT'04 Proceedings of the First international conference on Distributed Computing and Internet Technology
Year:
2004

Citing 10
Cited 0

Towards a theory of declarative knowledge

Foundations of deductive databases and logic programming
Database security

Database security
XML document security based on provisional authorization

Proceedings of the 7th ACM conference on Computer and communications security
Role-based authorization constraints specification

ACM Transactions on Information and System Security (TISSEC)
Flexible support for multiple access control policies

ACM Transactions on Database Systems (TODS)
Rights in an Object-Oriented Environment

Results of the IFIP WG 11.3 Workshop on Database Security V: Status and Prospects
Obligation Monitoring in Policy Management

POLICY '02 Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02)
A Logical Language for Expressing Authorizations

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
Removing permissions in the flexible authorization framework

ACM Transactions on Database Systems (TODS)
Provisions and obligations in policy management and security applications

VLDB '02 Proceedings of the 28th international conference on Very Large Data Bases

Quantified Score

Hi-index	0.00

Visualization

Abstract

Past generations of access control models fail to meet the needs of many applications such as business-to-business (B2B) applications and auctions This paper describes several access control models that have been recently proposed to address these emerging needs including models that are policy-neutral and flexible in that they permit enforcement of multiple policies on the same server, and models that incorporate richer semantics for access control, such as provisions and obligations.