Integrated constraints and inheritance in DTAC

Jonathon E. Tidswell; Trent Jaeger

doi:10.1145/344287.344307

Integrated constraints and inheritance in DTAC

Jonathon E. Tidswell, Trent Jaeger

Research output: Contribution to conference › Paper › peer-review

16 Scopus citations

Abstract

Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

Original language	English (US)
Pages	93-102
Number of pages	10
DOIs	https://doi.org/10.1145/344287.344307
State	Published - 2000
Event	5th ACM Workshop on Role-Based Access Control (RBAC) - Berlin, Ger Duration: Jul 26 2000 → Jul 27 2000

Conference

Conference	5th ACM Workshop on Role-Based Access Control (RBAC)
City	Berlin, Ger
Period	7/26/00 → 7/27/00

All Science Journal Classification (ASJC) codes

General Computer Science

Access to Document

10.1145/344287.344307

Cite this

@conference{d79caf7f63864ae3a1c7839b8190a0a8,

title = "Integrated constraints and inheritance in DTAC",

abstract = "Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.",

author = "Tidswell, {Jonathon E.} and Trent Jaeger",

year = "2000",

doi = "10.1145/344287.344307",

language = "English (US)",

pages = "93--102",

note = "5th ACM Workshop on Role-Based Access Control (RBAC) ; Conference date: 26-07-2000 Through 27-07-2000",

}

TY - CONF

T1 - Integrated constraints and inheritance in DTAC

AU - Tidswell, Jonathon E.

AU - Jaeger, Trent

PY - 2000

Y1 - 2000

N2 - Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

AB - Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

UR - http://www.scopus.com/inward/record.url?scp=0033661309&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=0033661309&partnerID=8YFLogxK

U2 - 10.1145/344287.344307

DO - 10.1145/344287.344307

M3 - Paper

AN - SCOPUS:0033661309

SP - 93

EP - 102

T2 - 5th ACM Workshop on Role-Based Access Control (RBAC)

Y2 - 26 July 2000 through 27 July 2000

ER -

Integrated constraints and inheritance in DTAC

Abstract

Conference

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this