Group-Centric Models for Secure and Agile Information Sharing

Abstract. To share information and retain control (share-but-protect) is a classic cyber security problem for which effective solutions continue to be elusive. Where the patterns of sharing are well defined and slow to change it is reasonable to apply the traditional access control models of lattice-based, role-based and attribute-based access control, along with discretionary authorization for further fine-grained control as required. Proprietary and standard rights markup languages have been developed to control what a legitimate recipient can do with the received information including control over its further discretionary dissemination. This dissemination-centric approach offers considerable flexibility in terms of controlling a particular information object with respect to already defined attributes of users, subjects and objects. However, it has many of the same or similar problems that discretionary access control manifests relative to role-based access control. In particula...

• Type: Journal
• Year: 2010
• Where: MMMACNS
• Authors: Ravi S. Sandhu, Ram Krishnan, Jianwei Niu, William H. Winsborough
• Keywords: Access Control, Access Control Models, Information Technology, MMMACNS 2010, Traditional Access Control