The Set and Function Approach to Modeling Authorization in Distributed Systems

Authors:
Tatyana Ryutov;B. Clifford Neuman
Affiliations:
-;-
Venue:
MMM-ACNS '01 Proceedings of the International Workshop on Information Assurance in Computer Networks: Methods, Models, and Architectures for Network Security
Year:
2001

Citing 11
Cited 2

The representation of policies as system objects

COCS '91 Proceedings of the conference on Organizational computing systems
Access control for collaborative environments

CSCW '92 Proceedings of the 1992 ACM conference on Computer-supported cooperative work
A calculus for access control in distributed systems

ACM Transactions on Programming Languages and Systems (TOPLAS)
The RSL99 language for role-based separation of duty constraints

RBAC '99 Proceedings of the fourth ACM workshop on Role-based access control
Compliance Checking in the PolicyMaker Trust Management System

FC '98 Proceedings of the Second International Conference on Financial Cryptography
Protection

ACM SIGOPS Operating Systems Review
Separation of Duty in Role-based Environments

CSFW '97 Proceedings of the 10th IEEE workshop on Computer Security Foundations
Enforceable Security Policies

Enforceable Security Policies
Decentralized Trust Management

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
Supporting Multiple Access Control Policies in Database Systems

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
A Logical Language for Expressing Authorizations

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy

The Specification and Enforcement of Advanced Security Policies

POLICY '02 Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02)
A formal policy specification language for an 802.11 WLAN with enhanced security network

ISCIS'05 Proceedings of the 20th international conference on Computer and Information Sciences

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present a new model that provides clear and precise semantics for authorization. The semantics is independent from underling security mechanisms and is separate from implementation. The model is capable of representing existing access control mechanisms. Our approach is based on set and function formalism. We focus our attention on identifying issues and use our model as a general basis to investigate the issues.