Constraint generation for separation of duty

Get BibTex-formatted data

Author

Hong Chen, Ninghui Li

Entry type

article

Abstract

Separation of Duty (SoD) is widely recognized to be a fundamental principle in computer security. A Static SoD (SSoD) policy states that in order to have all permissions necessary to complete a sensitive task, the cooperation of at least a certain number of users is required. In Role-Based Access Control (RBAC), Statically Mutually Exclusive Role (SMER) constraints are used to enforce SSoD policies. This paper studies the problem of generating sets of constraints that (a) enforce a set of SSoD policies, (b) are compatible with the existing role hierarchy, and (c) are minimal in the sense that there is no other constraint set that is less restrictive and satisfies (a) and (b).

Date

2006

Booktitle

Proceedings of the eleventh ACM symposium on Access control models and technologies

Journal

Symposium on Access Control Models and Technologies

Key alpha

Pages

130-138

Publisher

ACM

Publication Date

2006-00-00

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Article{ Li,
	title = "Constraint generation for separation of duty",
	author = "Hong Chen, Ninghui Li",
	year = "2006",
	booktitle = "Proceedings of the eleventh ACM symposium on Access control models and technologies",
	journal = "Symposium on Access Control Models and Technologies",
	pages = "130-138",
	publisher = "ACM",
	abstract = " Separation of Duty (SoD) is widely recognized to be a fundamental principle in computer security. A Static SoD (SSoD) policy states that in order to have all permissions necessary to complete a sensitive task, the cooperation of at least a certain number of users is required. In Role-Based Access Control (RBAC), Statically Mutually Exclusive Role (SMER) constraints are used to enforce SSoD policies. This paper studies the problem of generating sets of constraints that (a) enforce a set of SSoD policies, (b) are compatible with the existing role hierarchy, and (c) are minimal in the sense that there is no other constraint set that is less restrictive and satisfies (a) and (b).",
}