1999 · 14 citations · 13 references
ComputingComputer ScienceCybersecurityComputer ArchitectureSecurity ArchitectureSystems ArchitectureSecure System DesignSecurity ControlsSecurity OrchestrationLevelsObject-oriented ArchitectureSecure Software ArchitectureSecurity Architect
Internet systems provide a variety of ways for exchanging information, contain a large amount and variety of data, and have become quite complex, making them vulnerable to attacks from determined hackers. There are many products currently being used to stop these attacks but they suffer from a lack of completeness, only applying to one type of attack. Several mechanisms are needed for a comprehensive defense but this incurs the problem of their lack of coordination, which can be exploited for attacks. We propose a way to coordinate different mechanisms based on a unified object-oriented modeling approach and a hierarchical architecture whose layers define the scope of each security mechanism.
13
Role-based access control models
Ravi Sandhu, Edward J. Coyne, H.L. Feinstein et al. · Computer · 1996 · 5.8K citations
Operating systems: design and implementation
Microprocessors and Microsystems · 1987 · 479 citations · Full text
Günter Karjoth, Danny B. Lange, Mitsuru Oshima · IEEE Internet Computing · 1997 · 252 citations
Rolf Oppliger · Communications of the ACM · 1997 · 139 citations · Full text
Determining role rights from use cases
Eduardo B. Fernández, John Hawkins · 1997 · 107 citations · Full text