{"id":"https://openalex.org/W2105261429","doi":"https://doi.org/10.1109/isecs.2008.57","title":"Enforcing Information Flow Constraints in RBAC Environments","display_name":"Enforcing Information Flow Constraints in RBAC Environments","publication_year":2008,"publication_date":"2008-01-01","ids":{"openalex":"https://openalex.org/W2105261429","doi":"https://doi.org/10.1109/isecs.2008.57","mag":"2105261429"},"language":"en","primary_location":{"id":"doi:10.1109/isecs.2008.57","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isecs.2008.57","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 International Symposium on Electronic Commerce and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012366333","display_name":"Wei Zhou","orcid":"https://orcid.org/0000-0003-2649-9076"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wei Zhou","raw_affiliation_strings":["Hasso-Plattner-Institute, University of Potsdam, Potsdam, Germany","Hasso Plattner Inst., Univ. of Potsdam, Potsdam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hasso-Plattner-Institute, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Inst., Univ. of Potsdam, Potsdam","institution_ids":["https://openalex.org/I143288331"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102919398","display_name":"Christoph Meinel","orcid":"https://orcid.org/0000-0002-3410-3193"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Meinel","raw_affiliation_strings":["Hasso-Plattner-Institute, University of Potsdam, Potsdam, Germany","Hasso Plattner Inst., Univ. of Potsdam, Potsdam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hasso-Plattner-Institute, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Inst., Univ. of Potsdam, Potsdam","institution_ids":["https://openalex.org/I143288331"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0975,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87506236,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"159","last_page":"164"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.9741617441177368},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.8199077844619751},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7696853280067444},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.7612288594245911},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.7041804194450378},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6627635955810547},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4938412308692932},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.45834609866142273},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4394015371799469},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.11400985717773438},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.06445646286010742}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.9741617441177368},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.8199077844619751},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7696853280067444},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.7612288594245911},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.7041804194450378},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6627635955810547},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4938412308692932},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.45834609866142273},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4394015371799469},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.11400985717773438},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.06445646286010742},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isecs.2008.57","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isecs.2008.57","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2008 International Symposium on Electronic Commerce and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2012419258","https://openalex.org/W2118884583","https://openalex.org/W2123584724","https://openalex.org/W2129086092","https://openalex.org/W2140341594","https://openalex.org/W2154564703","https://openalex.org/W2154765153","https://openalex.org/W2154911336","https://openalex.org/W2166602595","https://openalex.org/W2617830947","https://openalex.org/W6737979257"],"related_works":["https://openalex.org/W2372156812","https://openalex.org/W2374393728","https://openalex.org/W2386545329","https://openalex.org/W2382286253","https://openalex.org/W2356011375","https://openalex.org/W1795360416","https://openalex.org/W2392979115","https://openalex.org/W1969771171","https://openalex.org/W318167434","https://openalex.org/W2105261429"],"abstract_inverted_index":{"While":[0],"role-based":[1],"access":[2,13,45,58,75,97],"control":[3,46,59,76,98],"(RBAC)":[4],"as":[5],"an":[6],"alternative":[7],"to":[8,22,95,112,123,144],"traditional":[9],"discretionary":[10],"and":[11,18,90],"mandatory":[12],"controls":[14],"is":[15,62,81],"very":[16],"effective":[17],"popular,":[19],"subsequent":[20],"attempts":[21],"apply":[23],"it":[24,69],"in":[25,121],"various":[26],"application":[27],"environments":[28],"also":[29],"revealed":[30],"some":[31,83,128],"limitations":[32],"of":[33,40,105],"RBAC.":[34,55,146],"We":[35],"developed":[36],"a":[37],"new":[38],"type":[39],"security":[41],"policy,":[42],"called":[43],"label-based":[44],"policy":[47,108],"(LBACP)":[48],"that":[49,85],"can":[50,132,141],"be":[51,71,133,142],"used":[52,64,143],"for":[53],"enhancing":[54],"Unlike":[56],"other":[57,74,96],"policies,":[60],"LBACP":[61,140],"not":[63],"independently.":[65],"On":[66],"the":[67,106,113,119,139],"contrary,":[68],"should":[70],"combined":[72],"with":[73],"policies.":[77],"The":[78,103],"basic":[79],"principle":[80],"defining":[82],"labels":[84,94,120],"specify":[86],"information":[87,114,130],"flow":[88,115],"constraints,":[89],"then":[91],"assigning":[92],"these":[93],"policies":[99],"or":[100],"their":[101],"components.":[102],"usage":[104],"labeled":[107],"components":[109],"must":[110],"conform":[111],"constraints":[116],"defined":[117],"by":[118],"order":[122],"avoid":[124],"being":[125],"misused.":[126],"Thus,":[127],"potential":[129],"leaks":[131],"avoided.":[134],"This":[135],"paper":[136],"investigates":[137],"how":[138],"enhance":[145]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}