SPONSORED BY: ACM SIGSAC and ACM Washington DC Chapter
HOSTED BY: George Mason University
Latest Information on this workshop is available on WWW at
http://www.list.gmu.edu/confrnc/rbac/rbac.html
The central idea of Role-Based Access Control (RBAC) is that users acquire and use
permissions based on their current job functions, assignments and activities in an
organization. The driving motivation for RBAC is to simplify security policy
administration while facilitating the definition of flexible, customized policies.
RBAC has been successfully applied since the mainframe era. Modern information systems
will continue to use classical RBAC models, but the development of new modeling concepts
and techniques is required to support large-scale, enterprise-wide, distributed systems.
The ACM workshop on RBAC brings together researchers, developers, and practitioners to
discuss new ideas, developments, applications, requirements, problems, and solutions in
the field of RBAC. The workshop invites participation from the database, network,
distributed systems, operating system, security and application communities. Attendance
is limited to 40 participants to foster a workshop atmosphere.
The inaugural workshop, held in November 1995, was successful in its modest goal of taking
a first step towards a consensus reference model for RBAC. There was substantial agreement
among attendees regarding the general concepts that RBAC can represent. Yet, there were
many manifestations, elaborations, and applications of these demonstrating that RBAC is
a rich and fruitfularea for future work. Proceedings of the first workshop are available
from ACM.
TECHNICAL PROGRAM
-----------------
Thursday - 11/6/97
8:00-8:25-Registration
8:30-10:00
Workflow Systems - Chair: Prof Ravi Sandhu
----------------
Welcome: Ravi Sandhu, et al.
E. Bertino (University of Milan, Italy), E. Ferrari (University of Milan, Italy), and
V. Atluri (Rutgers University), "A Flexible Model for the Specification
and Enforcement of Role-Based Authorizations in Workflow Management Systems"
Roshan Thomas (ORA). "Team-based Access Control (TMAC)"
10:00-10:25-Break
10:30-12:00
RBAC Models - Chair: Trent Jaeger
------------
D. Richard Kuhn (NIST), "Mutual Exclusion of Roles as a Means of Implementing Separation of
Duty in Role Based Access Control Systems"
Sylvia Osborn (University of Western Ontario, Canada), "Mandatory Access Control and
Role-Based Access Control Revisited"
Ravi Sandhu, et al (GMU and SETA Corporation), "The ARBAC97 Model for Role-Based
Administration of Roles: Preliminary Description and Outline"
12:00-1:00- Lunch
1:00-2:30
Panel on User Perspectives - Chair: David Ferrailo
--------------------------
(Rest of the panel to be announced later)
2:30-2:55 - Break
3:00-4:30 - Applications - Chair: Ed Coyne
William J. Meyers (Data General), "RBAC Emulation on Trusted DG/UX"
Roland Awischus (Schemann VAB, Germany), "Role Based Access Control with the Security
Administration Manager (SAM)"
Larry S. Bartz (IRS), "hyperDrive: Leveraging LDAP to Implement RBAC on the Web"
Friday - 11/7/97
8:30 - 10:00
Dynamic Domains - Chair: Sylvia Osborn
---------------
David F. Ferraiolo (NIST), "Specifying and Managing Role-Based Access Control within a
Corporate Intranet"
Christian Friberg and Achim Held (Univ of Kiel, Germany), "Support for Discretionary Role
Based Access Control in ACL-oriented Operating Systems"
Trent Jaeger (IBM), "A Role-based Access Control Model for Protection Domain Derivation and
Management"
10:00 - 10:25- Break
10:30 - 12:00
Emerging Topics - Chair: Charles Youman
---------------
Raymond Wong (Macgurie Univ, Australia), "RBAC Support in Object-Oriented Role Databases"
E.B. Fernandez and J.C. Hawkins (Florida Atlantic University), "Determining Role Rights from
Use Cases"
John Barkley (NIST), "Comparing Simple Role Based Access Control Models and Access
Control Lists"
12:00 - 1:00- Lunch
1:00 - 2:30
Content Based RBAC - Chair: John Barkley
------------------
Emil C. Lupu and Morris Sloman (Imperial College, UK), "Reconciling Role Based
Management and Role BasedAccess Control"
Tor Didriksen (Telenor R&D, Norway), "Rule Based Access Control"
Luigi Giuri and Pietro Iglio (Fondziene Ugo Bordidni, Italy), "Role Templates for
Content-Based Access Control"
2:30-3:00
Workshop Wrapup Discussion - Ravi Sandhu
Adjourn
--------------------------------------------------------------------
--------------------------------------------------------------------
LOCATION and VENUE
------------------
The Main campus of George Mason University is located in Fairfax, VA
and is approximately 18 miles from Washington DC. It is close to
both Washington National and Washington Dulles Airports. Dulles airport is
relatively closer to George Mason University.
The workshop is in the Ballroom of the Student Union Building 2.
--------------------------------------------------------------------
--------------------------------------------------------------------
TRAVEL and ACCOMMODATION
------------------------
By car
------
The GMU WEB site at http://www.gmu.edu/welcome/ gives the directions
and a campus map. Once you get to the campus, park your car in
the parking deck (the fee is $5 per day). The student union building 2 is
200 yards away.
By Metro
-------
Take metro to Vienna (orange line)..Take a CUE bus to GMU (It costs
$0.50).
Accommodations
-------------
The following five places may be considered:
(1) Bailiwick Inn, 4023 Chain Bridge Road, Fairfax, VA 22030 Tel. (703)691-2266. It is
1 mile from GMU, and on the CUE bus route. The Inn does not have a shuttle to the
airports. It is a restored 19th century residence and has very few rooms. The price
is $125* per room. When making a reservation please mention that you are
part of a workshop to be held at GMU. Otherwise the price varies from $130 to $199.
(2) Holiday Inn Fair Oaks, 11787 Lee Jackson Highway, Fairfax, VA 22033
Tel. (703)352-2525. Toll free reservation number is 1-800-HOLIDAY. The Inn has an
airport shuttle to Washington Dulles airport and for the Vienna Metro Station. It is
5 miles from the GMU campus. The price is $99* per room. Renting a car is recommended
for this option. The Inn is adjacent to a regional shopping center and movie theatres.
(3) Holiday Inn, 3535 Chain Bidge Road, Fairfax, VA 22030 Tel. (703)591-5500.
Toll free reservation number is 1-800-HOLIDAY. The Inn is 2.1 miles from the GMU
campus. The price is $79* per room. The Inn is in the City of Fairfax and there
are CUE buses to GMU.
(4) Hampton Inn, 10860 Lee Highway, Fairfax, VA Tel. (703)385-2600. The Inn is 2.5
miles from George Mason University. The price is $75 per person. The Inn is in the
city of Fairfax and there are CUE buses to GMU.
(5) Wellesley INN, 10327 Lee Highway, Fairfax, VA. Tel. (703)359-2888. The inn is 2.0
miles from campus. The price is $75. The inn is in the city of Fairfax and there are
CUE buses to GMU.
(6) Econo Lodge, 9700 Lee Highway, Fairfax, Va. Tel. (703)273-1160. The Lodge
is 3.2 miles from Campus. The Proce is $59. The Lodge is in the city of fairfax and
there are CUE buses to GMU.
* Rates are not guaranteed
--------------------------------------------------------------------
--------------------------------------------------------------------
REGISTRATION:
-------------
Registration Deadline: The registration form and the
fees have to reach the below address by 24th October 1997.
There will be a registration fee for all participants to cover meeting costs. The workshop
fee is $200 for regular participants and $100* for students.
Conference registration includes admission to all sessions, a copy of the workshop
proceedings, continental breakfasts each day, coffee breaks, and lunches.
*The student registration fee does not include lunches. Proof of full-time student
status is required when registering. You may submit a photocopy of your student ID
card or a letter signed by your advisor.
------------------------------------------------------------------------
2nd ACM RBAC WORKSHOP REGISTRATION
Name: __________________________________________
Affiliation: ___________________________________
Address: _______________________________________
Address: _______________________________________
Phone: _________________ Fax: ________________
Email: _________________________________________
Payments must be made by checks only.
Please make checks payable in US dollars to 2nd ACM workshop on RBAC.
Mail the form and the payment to:
Srinivas Ganta
CygnaCom Solutions, Inc.
Suite 100 West
7927 Jones Branch Drive
Mclean, VA 22102-3305
Voice:703-748-0621(X203)
--------------------------------------------------------------------
--------------------------------------------------------------------
For further information about the workshop/transportation/Accommodation, contact Srinivas
Ganta at sganta@cygnacom.com, Charles Youmann at cyouman@seta.com. or Ed Coyne at
ecoyne@seta.com or consult our web site at http://www.list.gmu.edu/confrnc/rbac/rbac.html
CONFERENCE COMMITTEE:
Steering Committee Chair: Ravi Sandhu, George Mason University
General Chair: Charles Youman, SETA Corporation
Program Chair: Ed Coyne, SETA Corporation
Proceedings Chair: Trent Jaeger, IBM T.J. Watson Research Center
Local Arrangements and Publicity Chair: Srinivas Ganta, CygnaCom
Solutions Inc.
Panel Chair: David Ferraiolo, NIST
PROGRAM COMMITTEE:
John Barkley, National Institute of Standards and Technology
David Ferraiolo, National Institute of Standards and Technology
Srinivas Ganta, CygnaCom Solutions, Inc.
Steven Greenwald, Independent Consultant
Trent Jaeger, IBM T.J. Watson Research Center
Sylvia Osborn, University of Western Ontario
--------------61F310871A4C--
--------------------------------------------------------------------------
The dbworld list reaches many people, and should only be used for
messages of general interest to the database community.
To subscribe or unsubscribe yourself (or optionally (address)) from
dbworld, send a msg to majordomo@cs.wisc.edu with one of these lines:
subscribe dbworld (address)
unsubscribe dbworld (address)
To find out more options send a msg with the line:
help
--------------------------------------------------------------------------