2003 · 191 citations · 17 references
ComputingInformation SystemsInformation TechnologyComputer SecurityData MiningInformation Security ManagementAccess ControlAccess RightsAuthorizationSecurity AdministrationSecurity ManagementSecurity RolesRole EngineeringRole MiningRole-based AuthorizationSecurity Role AnalysisSecurity Role EngineeringSecurity Role Mining
In this paper we describe the work devising a new technique for role-finding to implement Role-Based Security Administration. Our results stem from industrial projects, where large-scale customers wanted to migrate to Role-Based Access Control (RBAC) based on already existing access rights patterns in their production IT-systems.
17
Role-based access control models
Ravi Sandhu, Edward J. Coyne, H.L. Feinstein et al. · Computer · 1996 · 5.8K citations
The NIST model for role-based access control
Ravi Sandhu, David Ferraiolo, Richard Kühn · 2000 · 872 citations · Full text