IEEE Security & Privacy · 2007 · 77 citations · 2 references
ComputingAdministrative LawCybersecurityAccess ManagementSecurity ArchitectureSecurity ProtocolsAccess ControlAccess RightsAuthorizationInformation Security GovernanceSecurity ControlsSecurity StandardsAccess Control DesignAccess Control ImplementationAccess Control StandardsRole-based AuthorizationRole-based Permissions
As the authors of the original proposal for the role-based access control (RBAC) standard and developers of the models from which it derives, the authors respond here to Ninghui Li, Ji-Won Byun, and Elisa Bertino's critique, which also appears in this issue. This is an opportune time in the revision cycle to introduce proposals for changes to the standard.
2
Role-based access control models
Ravi Sandhu, Edward J. Coyne, H.L. Feinstein et al. · Computer · 1996 · 5.8K citations
The NIST model for role-based access control
Ravi Sandhu, David Ferraiolo, Richard Kühn · 2000 · 872 citations · Full text