Role-Based Access Controls

By David F. Ferraiolo, D. R. Kuhn. arXiv.org, 2009

870 citations recorded by the source corpus.

While Mandatory Access Controls (MAC) are appropriate for multilevel secure military applications, Discretionary Access Controls (DAC) are often perceived as meeting the security processing needs of industry and civilian government. This paper argues that reliance on DAC as the principal method of access c ontrol is unfounded and inappropriate for many commercial and civilian government organizations. The paper describes a type of non-discretionary access contro l - role-based access control (RBAC) that is more central to the secure processing needs of non-military systems than DAC.

Subfields: Artificial Intelligence, Sociology and Political Science

View Paper: https://www.semanticscholar.org/paper/5a0e3a713b38fc67c334bdbd2df1230216df2509

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Adam Bender
2. Daniel Starin
3. Neil T. Spring
4. Bobby Bhattacharjee
5. Randolph Baden

Citations in the corpus

• Persona: an online social network with user-defined privacy (2009, background): “This resembles role-based access control [11] and attribute-based access control, which bases authorization decisions on the attributes assigned to users [6, 40].”