|






| |

- Seminal RBAC paper: R. Sandhu et al, “Role-Based
Access Control Models”, IEEE Computer, 29(2):38-47, Feb. 1996,
Google Scholar Search 2500+
- RBAC Standard paper: D. Ferraiolo, R. Sandhu et al, “Proposed
NIST Standard for Role-Based Access Control”, ACM Trans. on
Information and System Security (TISSEC), 4(3): 224-274, Aug. 2001,
Google Scholar Search 800+
- R. Sandhu et al, “ The
NIST Model for Role-Based Access Control: Towards A Unified Standard”,
Proc. 5th ACM Workshop on Role-Based Access Control, Berlin, July 26-28, 2000,
pages 47-63,
Google Scholar Search 300+
- R. Sandhu et al, “The
ARBAC97 Model for Role-Based Administration of Roles”, ACM Transactions
on Information and System Security (TISSEC), 2(1): 105-135, Feb. 1999,
Google Scholar Search 300+
- R. Sandhu and P. Samarati, “Access
Control: Principles and Practice”, IEEE Communications, 32(9): 40-48,
Sept. 1994,
Google Scholar Search 300+
- G. Ahn and R. Sandhu. “Role-Based
Authorization Constraints Specification”, ACM Transactions on
Information and System Security (TISSEC), 3(4):207-226, Nov. 2000,
Google Scholar Search 200+
- S. Osborn, R. Sandhu and Q. Munawer. “Configuring
Role-Based Access Control to Enforce Mandatory and Discretionary Access
Control Policies”, ACM TISSEC, 3(2):85-106, May 2000.
Google Scholar Search 200+
- R. Sandhu, “Role-Based Access
Control”, Adv. in Computers, 46:237-286, Academic Press 1998,
Google Scholar Search 200+
- R. Sandhu, “Lattice-Based Access Control Models”,
IEEE Computer, 26(11): 9-19, Nov. 1993,
Google Scholar Search 200+ ...
- Jaehong Park and Ravi Sandhu. The UCON_ABC Usage Control Model, ACM Transactions on Information and System Security, Volume 7, Number 1, February 2004, pages 128-174.
Google Scholar Search 100+
- Joon Park, Ravi Sandhu and Gail-Joon Ahn. “Role-Based Access Control on the Web”,
ACM Transactions on Information and Systems Security (TISSEC), Volume 4, Number 1, February 2001.
Google Scholar Search 100+
- Ezedin Barka and Ravi Sandhu. “Framework for Role-Based Delegation Models”,
Proc. 16th Annual Computer Security Applications Conference, New Orleans, Louisiana, December 11-15, 2000, pages 168-176.
Google Scholar Search 100+
- R. Thomas and R. Sandhu, “Task-based
Authorization Controls (TBAC): A Family of Models for Active and
Enterprise-oriented Authorization Management”, Proc. 11th IFIP WG11.3
Working Conference on Database and Application Security, Lake Tahoe, California,
August 1997, pages 262-275.
Google Scholar Search 100+
-
Ravi Sandhu, Role Hierarchies and Constraints for
Lattice-Based Access Controls, ESORICS 1996.
Google Scholar Search 100+
- R. Sandhu, “The Typed Access Matrix Model”,
Proc. IEEE Symposium on Research in Security and Privacy, Oakland, California,
May 1992, pages 122-136.
Google Scholar Search 100+
-
Sushil Jajodia and Ravi Sandhu, Toward a Multilevel Secure Relational
Data Model, SIGMOD 1991.
Google Scholar Search 100+
-
Ravi Sandhu, Transaction Control Expressions for
Separation of Duties, ACSAC 1988.
Google Scholar Search 100+
|