{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T08:06:20Z","timestamp":1743062780815,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":16,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540883128"},{"type":"electronic","value":"9783540883135"}],"license":[{"start":{"date-parts":[[2008,1,1]],"date-time":"2008-01-01T00:00:00Z","timestamp":1199145600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2008]]},"DOI":"10.1007\/978-3-540-88313-5_21","type":"book-chapter","created":{"date-parts":[[2008,10,4]],"date-time":"2008-10-04T04:41:44Z","timestamp":1223095304000},"page":"317-332","source":"Crossref","is-referenced-by-count":17,"title":["On the Security of Delegation in Access Control Systems"],"prefix":"10.1007","author":[{"given":"Qihua","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ninghui","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hong","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"21_CR1","doi-asserted-by":"crossref","first-page":"49","DOI":"10.1145\/1063979.1063990","volume-title":"SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies","author":"V. Atluri","year":"2005","unstructured":"Atluri, V., Warner, J.: Supporting conditional delegation in secure workflow management systems. In: SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies, pp. 49\u201358. ACM Press, New York (2005)"},{"key":"21_CR2","first-page":"168","volume-title":"ACSAC 2000: Proceedings of the 16th Annual Computer Security Applications Conference","author":"E. Barka","year":"2000","unstructured":"Barka, E., Sandhu, R.: Framework for role-based delegation models. In: ACSAC 2000: Proceedings of the 16th Annual Computer Security Applications Conference, Washington, DC, USA, p. 168. IEEE Computer Society Press, Los Alamitos (2000)"},{"key":"21_CR3","unstructured":"Barka, E., Sandhu, R.: A role-based delegation model and some extensions (2000)"},{"issue":"1","key":"21_CR4","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1145\/300830.300837","volume":"2","author":"E. Bertino","year":"1999","unstructured":"Bertino, E., Ferrari, E., Atluri, V.: The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security\u00a02(1), 65\u2013104 (1999)","journal-title":"ACM Transactions on Information and System Security"},{"key":"21_CR5","doi-asserted-by":"crossref","unstructured":"Crampton, J.: A reference monitor for workflow systems with constrained task execution. In: Proceedings of the Tenth ACM Symposium on Access Control Models and Technologies (SACMAT 2005), Stockholm, Sweden, June 2005, pp. 38\u201347 (2005)","DOI":"10.1145\/1063979.1063986"},{"key":"21_CR6","doi-asserted-by":"crossref","first-page":"174","DOI":"10.1007\/11863908_12","volume-title":"Computer Security \u2013 ESORICS 2006","author":"Jason Crampton","year":"2006","unstructured":"Crampton, J., Khambhammettu, H.: Delegation in role-based access control. In: Proceedings of 11th European Symposium on Research in Computer Security (2006)"},{"key":"21_CR7","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1145\/1133058.1133071","volume-title":"SACMAT 2006: Proceedings of the eleventh ACM symposium on Access control models and technologies","author":"J.B.D. Joshi","year":"2006","unstructured":"Joshi, J.B.D., Bertino, E.: Fine-grained role-based delegation in presence of the hybrid role hierarchy. In: SACMAT 2006: Proceedings of the eleventh ACM symposium on Access control models and technologies, pp. 81\u201390. ACM Press, New York (2006)"},{"key":"21_CR8","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/344287.344300","volume-title":"RBAC 2000: Proceedings of the fifth ACM workshop on Role-based access control","author":"S. Na","year":"2000","unstructured":"Na, S., Cheon, S.: Role delegation in role-based access control. In: RBAC 2000: Proceedings of the fifth ACM workshop on Role-based access control, pp. 39\u201344. ACM Press, New York (2000)"},{"key":"21_CR9","unstructured":"Schaad, A.: A framework for organisational control principles. Ph.D Thesis, University of York (2003)"},{"key":"21_CR10","unstructured":"Tan, K., Crampton, J., Gunter, C.: The consistency of task-based authorization constraints in workflow systems. In: Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW), pp. 155\u2013169 (2004)"},{"key":"21_CR11","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1145\/1063979.1063991","volume-title":"SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies","author":"J. Wainer","year":"2005","unstructured":"Wainer, J., Kumar, A.: A fine-grained, controllable, user-to-user delegation method in rbac. In: SACMAT 2005: Proceedings of the tenth ACM symposium on Access control models and technologies, pp. 59\u201366. ACM Press, New York (2005)"},{"key":"21_CR12","doi-asserted-by":"crossref","unstructured":"Wang, Q., Li, N.: Satisfiability and resiliency in workflow systems. In: Proc.\u00a0European Symp. on Research in Computer Security (September 2007)","DOI":"10.1007\/978-3-540-74835-9_7"},{"key":"21_CR13","doi-asserted-by":"crossref","unstructured":"Wang, Q., Li, N.: On the security of delegation in access control systems. CERIAS Technical Report (July 2008), http:\/\/www.cs.purdue.edu\/homes\/wangq\/papers\/delegation.pdf","DOI":"10.1007\/978-3-540-88313-5_21"},{"key":"21_CR14","doi-asserted-by":"crossref","unstructured":"Warner, J., Atluri, V.: Inter-instance authorization constraints for secure workflow management. In: Proc.\u00a0ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 190\u2013199 (2006)","DOI":"10.1145\/1133058.1133085"},{"issue":"3","key":"21_CR15","doi-asserted-by":"publisher","first-page":"404","DOI":"10.1145\/937527.937530","volume":"6","author":"L. Zhang","year":"2003","unstructured":"Zhang, L., Ahn, G.-J., Chu, B.-T.: A rule-based framework for role-based delegation and revocation. ACM Trans. Inf. Syst. Secur.\u00a06(3), 404\u2013441 (2003)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"21_CR16","doi-asserted-by":"crossref","first-page":"149","DOI":"10.1145\/775412.775431","volume-title":"SACMAT 2003: Proceedings of the eighth ACM symposium on Access control models and technologies","author":"X. Zhang","year":"2003","unstructured":"Zhang, X., Oh, S., Sandhu, R.: Pbdm: a flexible delegation model in rbac. In: SACMAT 2003: Proceedings of the eighth ACM symposium on Access control models and technologies, pp. 149\u2013157. ACM Press, New York (2003)"}],"container-title":["Lecture Notes in Computer Science","Computer Security - ESORICS 2008"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-88313-5_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,17]],"date-time":"2021-09-17T20:07:02Z","timestamp":1631909222000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-88313-5_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008]]},"ISBN":["9783540883128","9783540883135"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-88313-5_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2008]]}}}