A flexible policy-based access control model for Workflow Management Systems

2011 ◽  
Author(s):  
Gang Ma ◽  
Kehe Wu ◽  
Tong Zhang ◽  
Wei Li
Keyword(s):  
Access Control ◽  
Workflow Management ◽  
Control Model ◽  
Management Systems ◽  
Workflow Management Systems ◽  
Access Control Model

Preventing Social Engineering and Espionage in Collaborative Knowledge Management Systems (KMSs)

2011 ◽  
Vol 3 (4) ◽  
pp. 44-51 ◽  
Author(s):  
Oluwafemi S. Ogunseye ◽  
Olusegun Folorunso ◽  
Jeff Zhang
Keyword(s):  
Knowledge Management ◽  
Access Control ◽  
Control Method ◽  
Social Engineering ◽  
Relevant Information ◽  
Control Model ◽  
Management Systems ◽  
Knowledge Management Systems ◽  
Security Measures ◽  
Access Control Model

Insider attack and espionage on computer-based information is a major problem for business organizations and governments. Knowledge Management Systems (KMSs) are not exempt from this threat. Prior research presented the Congenial Access Control Model (CAC), a relationship-based access control model, as a better access control method for KMS because it reduces the adverse effect of stringent security measures on the usability of KMSs. However, the CAC model, like other models, e.g., Role Based Access Control (RBAC), Time-Based Access Control (TBAC), and History Based Access Control (HBAC), does not provide adequate protection against privilege abuse by authorized users that can lead to industrial espionage. In this paper, the authors provide an Espionage Prevention Model (EP) that uses Semantic web-based annotations on knowledge assets to store relevant information and compares it to the Friend-Of-A-Friend (FOAF) data of the potential recipient of the resource. It can serve as an additional layer to previous access control models, preferably the Congenial Access Control (CAC) model.

scholarly journals Context-sensitive constraints for access control of business processes

2018 ◽  
Vol 15 (1) ◽  
pp. 1-30
Author(s):  
Gordana Milosavljevic ◽  
Goran Sladic ◽  
Branko Milosavljevic ◽  
Miroslav Zaric ◽  
Stevan Gostojic ◽  
...  
Keyword(s):  
Access Control ◽  
Business Processes ◽  
Workflow Management ◽  
Management Systems ◽  
Sensitive Information ◽  
Workflow Management Systems ◽  
Workflow Systems ◽  
Context Sensitive ◽  
The Common ◽  
Role Based

Workflow management systems (WfMS) are used to automate and facilitate business processes of an enterprise. To simplify the administration, it is a common practice in many WfMS solutions to allocate a role to perform each activity of the process and then assign one or more users to each role. Typically, access control for WfMS is role-based with a support of constraints on users and roles. However, merely using role and constraints concepts can hardly satisfy modern access control requirements of a contemporary enterprise. Permissions should not solely depend on common static and dynamic principles, but they must be influenced by the context in which the access is requested. In this paper, we focus on the definition and enforcement of the context-sensitive constraints for workflow systems. We extended the common role-based constraints listed in literature with context-sensitive information and workflow specific components. Also, we propose a mechanism for enforcing such constraints within WfMS.

A Flexible Role Based Access Control Engine Model

2011 ◽  
Vol 403-408 ◽  
pp. 2477-2480
Author(s):  
Zhen Wu Wang
Keyword(s):  
Access Control ◽  
Safety Management ◽  
Reference Model ◽  
Control Model ◽  
Management Systems ◽  
Software Systems ◽  
Role Based Access Control ◽  
Access Control Model ◽  
Engine Model ◽  
Role Based

The normal role-based access control (RBAC) model decouples users and permissions through roles,and different software systems have different implementation syteles.The paper proposes an engine model which can configure the RBAC management systems flexibly.It is a configuration tool to generate different RBAC management systems which meet different users’ requirements. The practice proves that the engine model can improve the efficiency and quality of software development. The role-based access control model decouples users and permissions through roles in order to simplify authorized operations and safety management[1]. Many literatures[2-6] discuss the RBAC model from different aspects. Some literatures[2-3] add new elements to the normal RBAC model,and these models are unidimensional according to the manipulated resources.For example, the NIST RBAC reference model [2] extends and standardize the RBAC96 [1] model reasonably.Some literatures[4-5] introduce time property to RBAC model and they are two-dimensional models according to the manipulated resources.Literature[6] furtherly add visual data muster to RBAC model and proposes a three-dimensional access control model. All of these models only discuss access control model theoretically,and different role-based access control modules in software systems have different instantiation sytles.For example, a RBAC module in one software system can not meet the access control requirements in another system because different RBAC modules have different table fields in order to realize certain requirements. This paper proposes a flexible role-based access control engine which can configure the RBAC module for different systmes according to each customer’s requirement.The engine is a configuration tool and it can realize various RBAC modules which have different table fields in database.The paper is organized as follows.Section I introduces the basic concepts of the NIST RBAC model;Seciton II details the description of RBAC engine model and gives the configuration steps using this engine to generate RBAC instances,and at last section III gives an example and concludes the paper.

Preventing Social Engineering and Espionage in Collaborative Knowledge Management Systems (KMSs)

2013 ◽  
pp. 108-116
Author(s):  
Oluwafemi S. Ogunseye ◽  
Olusegun Folorunso ◽  
Jeff Zhang
Keyword(s):  
Knowledge Management ◽  
Access Control ◽  
Control Model ◽  
Management Systems ◽  
Knowledge Management Systems ◽  
Security Measures ◽  
Access Control Model ◽  
Additional Layer ◽  
Prevention Model ◽  
Role Based

Insider attack and espionage on computer-based information is a major problem for business organizations and governments. Knowledge Management Systems (KMSs) are not exempt from this threat. Prior research presented the Congenial Access Control Model (CAC), a relationship-based access control model, as a better access control method for KMS because it reduces the adverse effect of stringent security measures on the usability of KMSs. However, the CAC model, like other models, e.g., Role Based Access Control (RBAC), Time-Based Access Control (TBAC), and History Based Access Control (HBAC), does not provide adequate protection against privilege abuse by authorized users that can lead to industrial espionage. In this paper, the authors provide an Espionage Prevention Model (EP) that uses Semantic web-based annotations on knowledge assets to store relevant information and compares it to the Friend-Of-A-Friend (FOAF) data of the potential recipient of the resource. It can serve as an additional layer to previous access control models, preferably the Congenial Access Control (CAC) model.

G-R_TRBAC access control model in grid environment

2009 ◽  
Vol 28 (12) ◽  
pp. 3214-3216
Author(s):  
Yi DING ◽  
Yong FANG ◽  
An-min ZHOU ◽  
Jiao ZENG ◽  
Yu FAN
Keyword(s):  
Access Control ◽  
Control Model ◽  
Grid Environment ◽  
Access Control Model
Sign in / Sign up

Export Citation Format

Share Document