DMCA
Role-Based Access Control (1992)
Cached
Download Links
- [hissa.ncsl.nist.gov]
- [hissa.ncsl.nist.gov]
- DBLP
Other Repositories/Bibliography
| Venue: | In 15th NIST-NCSC National Computer Security Conference |
| Citations: | 477 - 6 self |
BibTeX
@INPROCEEDINGS{Ferraiolo92role-basedaccess,
author = {David Ferraiolo and Richard Kuhn},
title = {Role-Based Access Control},
booktitle = {In 15th NIST-NCSC National Computer Security Conference},
year = {1992},
pages = {554--563}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
While Mandatory Access Controls (MAC) are appropriate for multilevel secure military applications, Discretionary Access Controls (DAC) are often perceived as meeting the security processing needs of industry and civilian government. This paper argues that reliance on DAC as the principal method of access control is unfounded and inappropriate for many commercial and civilian government organizations. The paper describes a type of non-discretionary access control - role-based access control (RBAC) - that is more central to the secure processing needs of non-military systems then DAC. 1 Introduction The U.S. government has been involved in developing security technology for computer and communications systems for some time. Although advances have been great, it is generally perceived that the current state of security technology has, to some extent failed to address the needs of all. [1], [2] This is especially true of organizations outside the Department of Defense (DoD). [3] The curre...
Keyphrases
role-based access control security technology discretionary access control access control communication system current state multilevel secure military application u.s. government secure processing need civilian government organization mandatory access control principal method civilian government security processing need non-military system
