Harm reduction treatment: Principles and practice

Denning, Patt; Little, Jeannie

doi:10.1037/e523562013-003

Cited by 1 publication

(2 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Indeed, this is the only requirement on simulations in [1,18,19]. If a simulation of scheme Simple safety analysis, i.e., determining whether an access control system can reach a state in which an unsafe access is allowed, was first formalized by Harrison et al [6] in the context of the well-known access matrix model [5,7]. In the HRU scheme [6], a protection system has a finite set of rights and a finite set of commands.…”

Section: Comparisons Based On Security Analysismentioning

confidence: 99%

See 1 more Smart Citation

Comparing the expressive power of access control models

Tripunitara

2004

Proceedings of the 11th ACM Conference on Computer and Communications Security

View full text Add to dashboard Cite

Comparing the expressive power of access control models is recognized as a fundamental problem in computer security. Such comparisons are generally based on simulations between different access control schemes. However, the definitions for simulations that are used in the literature make it impossible to put results and claims about the expressive power of access control models into a single context. Furthermore, some definitions for simulations used in the literature such as those used for comparing RBAC (Role-Based Access Control) with other models, are too weak to distinguish access control models from one another in a meaningful way.We propose a theory for comparing the expressive power of access control models. We perceive access control systems as state-transition systems and require simulations to preserve security properties. We discuss the rationale behind such a theory, apply the theory to reexamine some existing work on the expressive power of access control models in the literature and present three results. We show that: (1) RBAC with a particular administrative model from the literature (ARBAC97) is limited in its expressive power; (2) ATAM (Augmented Typed Access Matrix) is more expressive than TAM (Typed Access Matrix), thereby solving an open problem posed in the literature; and (3) a trust-management language is at least as expressive as RBAC with a particular administrative model (the URA97 component of ARBAC97).

show abstract

Section: Comparisons Based On Security Analysismentioning

confidence: 99%

“…A set of access control schemes is an access control model. An example of an access control model is the access matrix model [5]. An example of a scheme based on the access matrix model is the HRU scheme [6] which specifies that state-transition rules are commands of a particular form.…”

Section: Introductionmentioning

confidence: 99%

Comparing the expressive power of access control models

Tripunitara

2004

Proceedings of the 11th ACM Conference on Computer and Communications Security

View full text Add to dashboard Cite

show abstract

Harm reduction treatment: Principles and practice

Cited by 1 publication

References 0 publications

Comparing the expressive power of access control models

Comparing the expressive power of access control models

Contact Info

Product

Resources

About