Separation of duties in computerized information systems (1991) [39 citations — 4 self]
by Ravi Sandhu
In Database Security IV: Status and Prospects
http://www.list.gmu.edu/confrnc/ifip/ps_ver/i90sep.ps
Add To MetaCart
Abstract:
We describe a novel general-purpose mechanism for enforcing separation of duties in computerized information systems. This mechanism of transaction control expressions has close similarities to traditional controls in manual paper-based systems. It has the great benefit of intuitive simplicity, in both concept and implementation. 1

