Trbac

Bertino, Elisa; Bonatti, Piero A.; Ferrari, Elena

doi:10.1145/501978.501979

Cited by 633 publications

(301 citation statements)

References 20 publications

Supporting

Mentioning

299

Contrasting

Unclassified

Order By: Relevance

“…They are only suitable for single closed system, and thus are not applicable to open dynamic cloud computing system. Consequently, researchers proposed some improved models such as IRBAC2000, DRBAC, X-RBAC [6], ABAC [7], TBAC, TRBAC [8], etc. Unfortunately, they were only aimed at the specific aspects and cannot fundamentally solve the defect of the traditional models.…”

Section: Related Workmentioning

confidence: 99%

Protecting Cloud Data Using the Decentralized Information Flow Control with Authorization Condition

Ye¹,

Xu²,

Jiao³

et al. 2015

IJMLC

View full text Add to dashboard Cite

Abstract-In the extremely dynamic cloud computing system, traditional access control technologies provide no autonomic authorization and access control for the users on their data in remote cloud. Once data is migrated to the cloud, the user transfers the control to the providers of the cloud services and cloud hardware. So, whether the data is proper protected will be the users' most primary concerns and major challenges. This paper proposes a new decentralized information flow control model-DIFC-AC and its implementation. It expands the security label of DIFC with authorization condition used to express the control demands of the user, and access to the data is arbitrated based on their labels by intercepting IPC-relevant system calls. Thereby, the controls on the data are reached to the cloud, and sequentially the users' demands on the confidentiality, integrity and controllability of their data are meet.

show abstract

Section: Related Workmentioning

confidence: 99%

Protecting Cloud Data Using the Decentralized Information Flow Control with Authorization Condition

Ye¹,

Xu²,

Jiao³

et al. 2015

IJMLC

View full text Add to dashboard Cite

show abstract

“…We study the problem of role mining in the context of a temporal extension of RBAC, namely, TRBAC [1].…”

Section: Related Workmentioning

confidence: 99%

“…The traditional RBAC model is incapable of supporting such temporal constraints associated with roles. In order to capture this temporal aspect of roles, several extensions of RBAC have been proposed like Temporal-RBAC (TRBAC) [1] and Generalized Temporal Role-Based Access Control (GTRBAC) [8]. The TRBAC model supports periodic enabling and disabling of roles.…”

Section: Introductionmentioning

confidence: 99%

Toward Mining of Temporal Roles

Mitra

Sural

Atluri

et al. 2013

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. In Role-Based Access Control (RBAC), users acquire permissions through their assigned roles. Role mining, the process of finding a set of roles from direct user-permission assignments, is essential for successful implementation of RBAC. In many organizations it is often required that users are given permissions that can vary with time. To handle such requirements, temporal extensions of RBAC like Temporal-RBAC (TRBAC) and Generalized Temporal Role-Based Access Control (GTRBAC) have been proposed. Existing role mining techniques, however, cannot be used to process the temporal element associated with roles in these models. In this paper, we propose a method for mining roles in the context of TRBAC. First we formally define the Temporal Role Mining Problem (TRMP), and then show that the TRMP problem is NP-complete and present a heuristic approach for solving it.

show abstract

“…Permission to assign role is associated with set of environmental role in GRBAC and environmental properties such as time and location influence to role activation. Temporal RBAC (TRBAC) [2] consider time dimension to the RBAC model. Role is activated if time constraints are satisfied in TRBAC.…”

Section: Related Workmentioning

confidence: 99%

Context-Aware Role Based Access Control Using User Relationship

Jung¹,

Park²

2013

IJCTE

View full text Add to dashboard Cite

Abstract-Role-based access control is widely used in modern enterprise systems because it is adequate for reflecting the functional hierarchy in various organizations' for access control model. However, environmental changes, such as the increasing usage of mobile devices, make several challenges. Our research suggests a relationship-based access control model that considers the relation with surrounding users in organization. Relation is significant context information but it is not considered in existing access control models. The proposed technique is different from that in traditional research in two ways. First, we regard the relationship among employee's as contextual information. As a result, the administrator can manage fine-grained access control for cooperative work in an organization. Second, we design access control architecture using NFC technique to deal with usability and security problems. Moreover, we propose a protocol for enforcing the suggested access control model in real world. We report performance analysis and security evaluation IndexTerms-Access control, context-aware, relationship-based, Security.

show abstract

Trbac

Abstract: A temporal RBAC (TRBAC) model has recently been proposed that addresses

Cited by 633 publications

References 20 publications

Protecting Cloud Data Using the Decentralized Information Flow Control with Authorization Condition

Protecting Cloud Data Using the Decentralized Information Flow Control with Authorization Condition

Toward Mining of Temporal Roles

Context-Aware Role Based Access Control Using User Relationship

Contact Info

Product

Resources

About