Classification and formulation of role-based separation of duty constraints

Marzieh Esna Ashari  and Hamid R  Rabiee

doi:10.17485/ijst/2010/v3i6.19

Article

Classification and formulation of role-based separation of duty constraints

VIEWS 659
PDF 358

Abstract
Full-Text HTML
Full-Text PDF
How to Cite

Indian Journal of Science and Technology

DOI: 10.17485/ijst/2010/v3i6.19

Year: 2010, Volume: 3, Issue: 6, Pages: 637-641

Original Article

Classification and formulation of role-based separation of duty constraints

Marzieh Esna-Ashari¹ and Hamid R. Rabiee^2*

¹ Department of Computer Science, School of Mathematics, University of Tehran, Tehran, Iran
² AICTC Research Center, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran
[email protected] ; [email protected]

This work is licensed under a Creative Commons Attribution 4.0 International License.

Abstract

Separation of Duty (SOD) is a fundamental principle in security systems and has a long history in computer security research. It is also an important characteristic in the Role-Based Access Control (RBAC) system. Various categories of this principle have been pointed out for RBAC environment by different researchers, but they have neither been classified nor formulated. This paper beside classifying and formulating all the former introduced types of SOD in Rolebased environment; presents and defines formally new types of Role-based SOD.
Keywords: Separation of duty (SOD), role-based access control (RBAC)