2005 · 59 citations · 16 references
BusinessPublic PolicyAuditingRegulatory ComplianceSecurity ArchitectureAccountabilityEnforcement MechanismsInformation Systems AuditAudit MechanismsPolicy AuditPolicy AuditingPolicy EnforcementPolicy Enforcement Mechanisms
We describe a policy language and implement its associated proof checking system. In our system, agents can distribute data along with usage policies in a decentralized architecture. Our language supports the specification of conditions and obligations, and also the possibility to refine policies. In our framework, the compliance with usage policies is not actively enforced. However, agents are accountable for their actions, and may be audited by an authority requiring justifications.
16
Access control: principle and practice
Ravi Sandhu, Pierangela Samarati · IEEE Communications Magazine · 1994 · 1.3K citations
Design of a role-based trust-management framework
Ninghui Li, John C. Mitchell, William H. Winsborough · 2005 · 753 citations
A unified framework for enforcing multiple access control policies
Sushil Jajodia, Pierangela Samarati, V. S. Subrahmanian et al. · 1997 · 285 citations · Full text
Binder, a logic-based security language
John DeTreville · 2005 · 284 citations