Integrated constraints and inheritance in DTAC

Jonathon E. Tidswell; Trent Jaeger

doi:10.1145/344287.344307

Integrated constraints and inheritance in DTAC

Jonathon E. Tidswell
, Trent Jaeger

Computer Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

17 Scopus citations

Abstract

Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

Original language	English (US)
Title of host publication	RBAC '00
Subtitle of host publication	Proceedings of the fifth ACM workshop on Role-based access control
Publisher	ACM
Pages	93-102
Number of pages	10
ISBN (Electronic)	9781581132595
DOIs	https://doi.org/10.1145/344287.344307
State	Published - 2000
Event	5th ACM Workshop on Role-Based Access Control, RBAC 2000 - Berlin, Ger Duration: Jul 26 2000 → Jul 27 2000

Publication series

Name	Proceedings of the ACM Workshop on Role-Based Access Control

Conference

Conference	5th ACM Workshop on Role-Based Access Control, RBAC 2000
City	Berlin, Ger
Period	7/26/00 → 7/27/00

All Science Journal Classification (ASJC) codes

General Computer Science

Access to Document

10.1145/344287.344307

Cite this

@inproceedings{26a13023a6064fafb041a4ed166f9c24,

title = "Integrated constraints and inheritance in DTAC",

abstract = "Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.",

author = "Tidswell, \{Jonathon E.\} and Trent Jaeger",

year = "2000",

doi = "10.1145/344287.344307",

language = "English (US)",

series = "Proceedings of the ACM Workshop on Role-Based Access Control",

publisher = "ACM",

pages = "93--102",

booktitle = "RBAC '00",

note = "5th ACM Workshop on Role-Based Access Control, RBAC 2000 ; Conference date: 26-07-2000 Through 27-07-2000",

}

TY - GEN

T1 - Integrated constraints and inheritance in DTAC

AU - Tidswell, Jonathon E.

AU - Jaeger, Trent

PY - 2000

Y1 - 2000

N2 - Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

AB - Inheritance and constraints are two common techniques for safely managing the complexity of large access control configurations. Inheritance is used to help factor the model, while constraints are used to help ensure that the complexity will not result in an unsafe configuration arising in the future evolution of the system. In this paper we develop an integrated mathematical approach to defining both inheritance and constraints in the dynamically typed access control (DTAC) model. In the process we identify several useful relationships among DTAC objects. The combination of DTAC and our new relationships allow us to graphically construct a greater variety and complexity of efficiently verifiable separation of duty constraints than any other model we are aware of.

UR - https://www.scopus.com/pages/publications/0033661309

UR - https://www.scopus.com/pages/publications/0033661309#tab=citedBy

U2 - 10.1145/344287.344307

DO - 10.1145/344287.344307

M3 - Conference contribution

AN - SCOPUS:0033661309

T3 - Proceedings of the ACM Workshop on Role-Based Access Control

SP - 93

EP - 102

BT - RBAC '00

PB - ACM

T2 - 5th ACM Workshop on Role-Based Access Control, RBAC 2000

Y2 - 26 July 2000 through 27 July 2000

ER -

Integrated constraints and inheritance in DTAC

Abstract

Publication series

Conference

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this