{"id":"https://openalex.org/W2981962609","doi":"https://doi.org/10.1109/tdsc.2019.2949410","title":"Cree: a Performant Tool for Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies","display_name":"Cree: a Performant Tool for Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2981962609","doi":"https://doi.org/10.1109/tdsc.2019.2949410","mag":"2981962609"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2019.2949410","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2949410","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030535003","display_name":"Jonathan Shahen","orcid":"https://orcid.org/0000-0002-6566-0961"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jonathan Shahen","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103041668","display_name":"Jianwei Niu","orcid":"https://orcid.org/0000-0002-5667-3285"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jianwei Niu","raw_affiliation_strings":["Department of Computer Science, University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081788400","display_name":"Mahesh Tripunitara","orcid":"https://orcid.org/0000-0002-3615-9393"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mahesh V. Tripunitara","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0345,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.94300586,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13471","display_name":"Cognitive Functions and Memory","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/3205","display_name":"Experimental and Cognitive Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9660999774932861,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7134756445884705},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.48399993777275085},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.42694658041000366},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34223657846450806},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.09579640626907349}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7134756445884705},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.48399993777275085},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.42694658041000366},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34223657846450806},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09579640626907349}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2019.2949410","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2019.2949410","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6600000262260437,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1238999019","display_name":null,"funder_award_id":"CNS-1748109","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G4993073633","display_name":null,"funder_award_id":"1736209","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G5675503907","display_name":null,"funder_award_id":"CNS-0964710","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"}],"funders":[{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1515933843","https://openalex.org/W1518747853","https://openalex.org/W1586419679","https://openalex.org/W1752392398","https://openalex.org/W1967269525","https://openalex.org/W1975584929","https://openalex.org/W1997862012","https://openalex.org/W2015653806","https://openalex.org/W2026598756","https://openalex.org/W2036289808","https://openalex.org/W2044968788","https://openalex.org/W2053741629","https://openalex.org/W2076004681","https://openalex.org/W2110076463","https://openalex.org/W2111753337","https://openalex.org/W2137144647","https://openalex.org/W2137463924","https://openalex.org/W2138903568","https://openalex.org/W2152053098","https://openalex.org/W2154765153","https://openalex.org/W2170496240","https://openalex.org/W2327058738","https://openalex.org/W2568995548","https://openalex.org/W2807924787","https://openalex.org/W4237604624","https://openalex.org/W4248223175"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Access":[0,156],"control":[1,28,44,140],"deals":[2],"with":[3,277],"the":[4,20,59,65,71,92,143,150,169,265,323,336,370],"roles":[5,36],"and":[6,14,37,103,206,253,300,305,335,346,368],"privileges":[7,127],"to":[8,31,33,46,55,61,119,128,168,211,250,281,290],"which":[9,87,97,164,176,197,235,363],"a":[10,23,49,81,101,115,129,185,207,212,223,232,339],"user":[11,208],"is":[12,15,40,53,98,112,165,209,225,264,274,374],"authorized,":[13],"an":[16,159,166,200,255,278],"important":[17],"aspect":[18],"of":[19,22,64,152,219,242,333,338],"security":[21,51,117],"system.":[24],"As":[25],"enterprise":[26,85],"access":[27,43,108,139],"systems":[29],"need":[30],"scale":[32],"several":[34],"users,":[35,75],"privileges,":[38],"it":[39],"common":[41],"for":[42,137,162,181,221,227,239,262,351,362,369,384],"models":[45],"support":[47],"delegation:":[48],"trusted":[50,116],"administrator":[52,118],"able":[54],"give":[56],"semi-trusted":[57,74,130],"users":[58],"ability":[60],"change":[62],"portions":[63],"authorization":[66],"state.":[67],"With":[68],"delegation":[69],"comes":[70],"danger":[72],"that":[73,83,194,271,320,326,357],"perhaps":[76],"in":[77,88,91,107,142,149,190,196,286,319],"collusion,":[78],"may":[79,203],"effect":[80],"state":[82],"violates":[84],"policy,":[86],"turn":[89],"results":[90,337,355],"problem":[93,106],"called":[94],"safety":[95,147,182,240,273],"analysis,":[96],"regarded":[99],"as":[100,382],"fundamental":[102],"technically":[104],"challenging":[105],"control.":[109],"Safety":[110,132],"analysis":[111,133,148,241],"used":[113],"by":[114,311],"answer":[120],"\u201cwhat":[121],"if\u201d":[122],"questions":[123],"before":[124],"she":[125],"grants":[126],"user.":[131],"has":[134,173],"been":[135],"studied":[136],"various":[138],"schemes":[141],"literature;":[144],"we":[145,236,247,284],"address":[146,322],"context":[151],"Administrative":[153],"Temporal":[154],"Role-Based":[155],"Control":[157],"(ATRBAC),":[158],"administrative":[160,192,201,228],"model":[161,251,257,282],"TRBAC,":[163],"extension":[167],"traditional":[170],"RBAC.":[171],"ATRBAC":[172,243,272,327,352],"new":[174,178,188,217,324],"features,":[175],"introduce":[177],"technical":[179],"challenges":[180,325],"analysis:":[183],"(i)":[184],"time-dimension:":[186],"two":[187,216],"components":[189],"each":[191],"rule":[193],"specify":[195],"time":[198],"periods":[199],"action":[202],"be":[204],"effected,":[205],"authorized":[210],"role,":[213],"and,":[214],"(ii)":[215],"kinds":[218],"rules":[220],"whether":[222],"role":[224],"enabled":[226],"action.":[229],"We":[230,329,377],"propose":[231],"software":[233],"tool,":[234],"call":[237],"Cree,":[238,334],"policies.":[244],"In":[245],"Cree":[246,263,287,364,380],"reduce":[248],"ATRBAC-Safety":[249],"checking":[252],"use":[254],"off-the-shelf":[256],"checker,":[258],"NuSMV.":[259],"The":[260],"foundation":[261],"observation":[266],"from":[267],"our":[268,315,331,344],"prior":[269,312,349],"work":[270],"PSPACE.":[275],"Along":[276],"efficient":[279],"reduction":[280],"checking,":[283],"include":[285],"four":[288],"techniques":[289],"further":[291],"improve":[292],"performance:":[293],"Polynomial":[294],"Time":[295],"Solving":[296],"when":[297],"possible,":[298],"Forward":[299],"Backwards":[301],"Pruning,":[302],"Abstraction":[303],"Refinement,":[304],"Bound":[306],"Estimation.":[307],"These":[308],"are":[309,317,359],"inspired":[310],"work,":[313],"but":[314],"algorithms":[316],"different":[318],"they":[321],"introduces.":[328],"discuss":[330],"design":[332],"thorough":[340],"empirical":[341],"assessment":[342],"across":[343],"approach,":[345],"five":[347],"other":[348],"tools":[350],"safety.":[353],"Our":[354],"suggest":[356],"there":[358],"input":[360],"classes":[361],"outperforms":[365],"existing":[366],"tools,":[367],"remainder,":[371],"Cree's":[372],"performance":[373],"no":[375],"worse.":[376],"have":[378],"made":[379],"available":[381],"open-source":[383],"public":[385],"download.":[386]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}