Separation of Duty in Role-Based Environments
Type
Article
Year
1997
Authors
Simon, R.T., Zurko, M.E.
Identifiers
DOI: https://doi.org/10.1.1.28.6661
Publication
IEEE: Proceedings 10th Computer Security Foundations Workshop
Pages
183–194
Abstract
Separation of Duty is a principle that has a long history in computer security research. Many computing systems provide rudimentary support for this principle, but often the support is inconsistent with the way the principle is applied in non-computing environments. Furthermore, there appears to be no single accepted meaning of the term. We examine the ways in which Separation of Duty has been used, adding the notion of History-based Separation of Duty. We assess ways in which computing systems may support Separation of Duty. We discuss the mechanisms we are implementing to support Separation of Duty and roles in Adage, a general-purpose authorization language and toolkit.
(, p. 1)
Links
Citation
Simon, R.T., Zurko, M.E., 1997. Separation of Duty in Role-Based Environments, in: IEEE: Proceedings 10th Computer Security Foundations Workshop. pp. 183–194.
