references.bib

%% This BibTeX bibliography file was created using BibDesk.
%% http://bibdesk.sourceforge.net/
%% Created for Prosunjit Biswas at 2014-09-22 21:43:54 -0500 
%% Saved with string encoding Unicode (UTF-8) 

@inproceedings{abac-logic,
	Author = {Wang, Lingyu and Wijesekera, Duminda and Jajodia, Sushil},
	Booktitle = {Proceedings of FMSE},
	Organization = {ACM},
	Pages = {45--55},
	Title = {A logic-based framework for attribute based access control},
	Year = {2004}}


	
	@misc{keystone,
	Howpublished = {http://docs.openstack.org/developer/keystone/},
	Note = { accessed 09/2015},
	Title = {Keystone, the OpenStack Identity Service}}
	

	
 
	
 
	
 
	
 
	
 
	
 
	

	

	
	@article{rbac,
	Author = {Sandhu, Ravi S and Coyne, Edward J and Feinstein, Hal L and Youman, Charles E},
	Journal = {IEEE Computer},
	Number = {2},
	Pages = {38--47},
	Organization = {IEEE Computer Society},
	Title = {Role-based access control models},
	Volume = {29},
	Year = {1996}}
	
	


	
	
	@article{damiani2002fine,
	Author = {Damiani, Ernesto and De Capitani di Vimercati, Sabrina and Paraboschi, Stefano and Samarati, Pierangela},
	Journal = {ACM TISSEC},
	Number = {2},
	Pages = {169--202},
	Organization = {ACM},
	Title = {A fine-grained access control system for {XML} documents},
	Volume = {5},
	Year = {2002}}
	
	 
	
 
	

	
	
	
	@article{policy-based2,
	Author = {Bertino, Elisa and Castano, Silvana and Ferrari, Elena and Mesiti, Marco},
	Journal = {World Wide Web},
	Number = {3},
	Pages = {139--151},
	Publisher = {Springer},
	Title = {Specifying and enforcing access control policies for {XML} document sources},
	Volume = {3},
	Year = {Springer, 2000}}
	
 
	
	@inproceedings{policy-based4,
	Author = {Bertino, Elisa and Castano, Silvana and Ferrari, Elena and Mesiti, Marco},
	Booktitle = {2nd ACM WIDM},
	Organization = {},
	Pages = {22--27},
	Title = {Controlled access and dissemination of {XML} documents},
	Year = {1999}}
	
	@article{policy-based5,
	Author = {Bertino, Elisa and Ferrari, Elena},
	Journal = {ACM TISSEC},
	Number = {3},
	Pages = {290--331},
	Publisher = {ACM},
	Title = {Secure and selective dissemination of {XML} documents},
	Volume = {5},
	Year = {2002}}
	
	@inproceedings{policy-based6,
	title={Specifying access control policies for {XML} documents with {XPath}},
	author={Fundulaki, Irini and Marx, Maarten},
	booktitle={9th ACM SACMAT},
	pages={61--69},
	year={2004},
	organization={}
	}
	
	@article{policy-based7,
	title={Design and implementation of an access control processor for {XML} documents},
	author={Damiani, Ernesto and di Vimercati, Sabrina de Capitani and Paraboschi, Stefano and Samarati, Pierangela},
	journal={Computer Networks},
	volume={33},
	number={1},
	pages={59--75},
	year={2000},
	Organization={Elsevier}
	}
	
 
	
 
	

	
	
	@misc{mongodb-links,
	Howpublished = {\url{http://docs.mongodb.org/manual/reference/database-references/#dbref}},
	Note = {accessed 09/2015},
	Title = {{References in MongoDB}}}
	
 
	 
	
	@misc{couchdb,
	Howpublished = {\url{http://couchdb.apache.org/}},
	Note = {accessed 09/2015},
	Title = {{Apache CouchDB{\texttrademark}}}}
	
	@misc{cassandra,
	Howpublished = {\url{http://cassandra.apache.org/}},
	Note = {accessed 09/2015},
	Title = {{Apache Cassandra}}}
	
 
	
	@inproceedings{labac,
	title={Label-Based Access Control: An {ABAC} Model with Enumerated Authorization Policy},
	author={Biswas, Prosunjit and Sandhu, Ravi and Krishnan, Ram},
	booktitle={Proceeding of the ACM Int. Workshop on Attribute Based Access Control},
	pages={1--12},
	year={2016},
	organization={}
	}
	
	@misc{swift-acl,
	Howpublished = {\url{http://docs.openstack.org/developer/swift/}},
	Note = {accessed 09/2015},
	Title = {{Swift ACLs}}}
	
 
	
 
	
 
	
 
 
	
 
	
	@misc{mongodb,
	Howpublished = {\url{http://www.mongodb.org/}},
	Note = {accessed 09/2015},
	Title = {{MongoDB}}}
	
 
	
	@misc{JSONPath,
	Author = {Stefan Goessner},
	Howpublished = {\url{http://goessner.net/articles/JsonPath/}},
	Note = {accessed 09/2015},
	Title = {{JSONPath Syntax}}}
	
	@misc{json-official-website,
	Date-Modified = {2014-09-18 04:56:13 +0000},
	Howpublished = {\url{http://json.org/}},
	Note = {accessed 09/2015},
	Title = {{JSON Official Website}}}
	
 
 
	
 
	@misc{twitter-api,
	Howpublished = {\url{https://dev.twitter.com/docs/api/1.1/overview}},
	Note = {accessed 09/2015},
	Title = {{Twitter API}}}
	


	
	@inproceedings{purpose-bac,
	title={Purpose based access control of complex data for privacy protection},
	author={Byun, Ji-Won and Bertino, Elisa and Li, Ninghui},
	booktitle={Proceedings of 10th ACM SACMAT},
	pages={},
	year={2005},
	organization={}
	}
	@article{content-bac,
	title={A content-based authorization model for digital libraries},
	author={Adam, Nabil R and Atluri, Vijayalakshmi and Bertino, Elisa and Ferrari, Elena},
	Journal={IEEE KDE},
	volume={14},
	number={2},
	pages={296--315},
	year={2002},
	organization={IEEE}
	}
 
	@article{lbac,
	title={Lattice-based access control models},
	author={Sandhu, Ravi S.},
	journal={IEEE Computer},
	volume={26},
	number={11},
	pages={9--19},
	year={1993},
	Organization={IEEE}
	}
 
	
	
	@article{INCITS526,
	title={{Information technology {-} Next Generation Access Control {-} Generic Operations and Data Structures}},
	author={},
	journal={INCITS 526, American National Standard for Information Technology},
	number={},
	pages={},
	year={},
	publisher={American National Standard for Information Technology}
	}
	
	
	@article{hu2015attribute,
	title={Attribute-based access control},
	author={Hu, Vincent C and Kuhn, D Richard and Ferraiolo, David F},
	journal={Computer},
	number={2},
	pages={85--88},
	year={2015},
	publisher={IEEE}
	}
	
	@inproceedings{al2002model,
	title={A model for attribute-based user-role assignment},
	author={Al-Kahtani, Mohammad and Sandhu, Ravi},
	booktitle={18th Annual Proceedings on Computer Security Applications Conference},
	pages={353--362},
	year={2002},
	organization={IEEE}
	}
	
	@article{access-control-evaluation,
	title={Guidelines for access control system evaluation metrics},
	author={Hu, Vincent C and Kent, Karen Ann},
	year={2012},
	journal={NISTIR 7874},
	publisher={NIST}
	}
	
 
	
	@article{hu2013guide,
	title={Guide to attribute based access control ({ABAC}) definition and considerations (draft)},
	author={Hu, Vincent C and Ferraiolo, David and Kuhn, Rick and Friedman, Arthur R and Lang, Alan J and Cogdell, Margaret M and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen},
	journal={NIST special publication},
	volume={800},
	pages={162},
	year={2013},
	publisher={Citeseer}
	}
	
	
	
	@Misc{satisfiability,
	howpublished = {https://en.wikipedia.org/wiki/Satisfiability},
	note = {Accessed November 25, 2015},
	title = {Satisfiability},
	author = {Wikipedia}
	}
	
	
	
	@Misc{nccoe-abac-draft,
	howpublished = {https://nccoe.nist.gov/sites/default/files/nccoe/NIST_SP1800-3c_ABAC_0.pdf},
	note = {Accessed November 25, 2015},
	title = {ATTRIBUTE BASED ACCESS CONTROL How-To Guides For Security Engineers},
	author = {NCCOE}
	}
	
	@Misc{ldap,
	howpublished = {https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol},
	note = {Accessed November 25, 2015},
	title = {{LDAP}},
	author = {Wikipedia}
	}
	
	
	
 
	
	@inproceedings{sandhu2012authorization,
	Author = {Sandhu, Ravi},
	Booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies},
	Organization = {ACM},
	Pages = {69--70},
	Title = {The authorization leap from rights to attributes: maturation or chaos?},
	Year = {2012}}
	
	@article{xacml,
	Author = {Moses, Tim and others},
	Journal = {{OASIS} Standard},
	Title = {Extensible access control markup language ({XACML}) version 2.0},
	Volume = {},
	Year = {2005}}
	
	@article{grid-abac,
	Author = {Lang, Bo and Foster, Ian and Siebenlist, Frank and Ananthakrishnan, Rachana and Freeman, Tim},
	Journal = {Journal of Grid Computing},
	Number = {2},
	Pages = {169--180},
	Publisher = {Springer},
	Title = {A flexible attribute based access control method for grid computing},
	Volume = {7},
	Year = {2009}}
	
	@inproceedings{abac-ws,
	Author = {Shen, Hai-bo and Hong, Fan},
	Booktitle = {PDCAT'06.},
	Organization = {IEEE},
	Pages = {74--79},
	Title = {An attribute-based access control model for web services},
	Year = {2006}}
	

	
	
	@inproceedings{attribute-administration,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi},
	Booktitle = {Proceedings. SRAS 2012},
	Organization = {ACM},
	Pages = {7--12},
	Title = {A role-based administration model for attributes},
	Year = {2012}}
	
	\vfill \eject 
	@article{hru,
	Author = {Harrison, Michael A and Ruzzo, Walter L and Ullman, Jeffrey D},
	Journal = {Communications of the ACM},
	Number = {8},
	Pages = {461--471},
	Publisher = {ACM},
	Title = {Protection in operating systems},
	Volume = {19},
	Year = {1976}}
	
	@article{abacAlpha,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi S},
	Journal = {DBSec},
	Pages = {41--55},
	Publisher = {Springer},
	Title = {A Unified Attribute-Based Access Control Model Covering {DAC}, {MAC} and {RBAC}.},
	Volume = {12},
	Year = {2012}}
	
	@incollection{hgabac,
	Author = {Servos, Daniel and Osborn, Sylvia L},
	Booktitle = {Foundations and Practice of Security},
	Pages = {187--204},
	Publisher = {Springer},
	Title = {{HGABAC}: Towards a Formal Model of Hierarchical Attribute-Based Access Control},
	Year = {2014}}
	
	@article{nist-rbac,
	Author = {Ferraiolo, David F and Sandhu, Ravi and Gavrila, Serban and Kuhn, D Richard and Chandramouli, Ramaswamy},
	Journal = {ACM TISSEC},
	Number = {3},
	Pages = {224--274},
	Publisher = {ACM},
	Title = {Proposed {NIST} standard for role-based access control},
	Volume = {4},
	Year = {2001}}
	
	@inproceedings{two-sorted-rbac,
	Author = {Kuijper, Wouter and Ermolaev, Victor},
	Booktitle = {Proceedings of the 19th ACM SACMAT},
	Organization = {ACM},
	Pages = {63--74},
	Title = {Sorting out role based access control},
	Year = {2014}}
	
	@article{nist-abac-draft,
	Author = {Hu, Vincent C and Ferraiolo, David and Kuhn, Rick and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen},
	Journal = {NIST Special Publication},
	Pages = {162},
	Title = {Guide to attribute based access control  ({ABAC}) definition and considerations},
	Volume = {800},
	Year = {2014}}
	
	@article{policy-machine,
	Author = {Ferraiolo, David and Atluri, Vijayalakshmi and Gavrila, Serban},
	Journal = {Journal of Systems Architecture},
	Number = {4},
	Pages = {412--424},
	Publisher = {Elsevier},
	Title = {The {Policy} {Machine}: A novel architecture and framework for access control policy specification and enforcement},
	Volume = {57},
	Year = {2011}}
	
	@inproceedings{policy-composing,
	Author = {Ferraiolo, David F and Gavrila, Serban and Hu, Vincent and Kuhn, D Richard},
	Booktitle = {Proceedings of the 10th ACM SACMAT},
	Organization = {ACM},
	Pages = {11--20},
	Title = {Composing and combining policies under the policy machine},
	Year = {2005}}
	@article{abcl,
	title={Constraints Specication in Attribute Based Access Control},
	author={Bijon, Khalid Zaman and Krishman, Ram and Sandhu, Ravi},
	journal={Science},
	volume={2},
	number={3},
	pages={pp--131},
	year={2013}
	}
	
	@article{rcl,
	title={Role-based authorization constraints specification},
	author={Ahn, Gail-Joon and Sandhu, Ravi},
	journal={ACM TISSEC},
	volume={3},
	number={4},
	pages={207--226},
	year={2000},
	publisher={ACM}
	}
	
	@inproceedings{tripli,
	title={Comparing the expressive power of access control models},
	author={Tripunitara, Mahesh V and Li, Ninghui},
	booktitle={Proceedings of the 11th ACM CCS},
	pages={62--71},
	year={2004},
	organization={}
	}
	@inproceedings{dsod,
	title={Separation of duty in role-based environments},
	author={Simon, Richard T and Zurko, Mary Ellen},
	booktitle={Proceedings 10th Computer Security Foundations Workshop},
	pages={183--194},
	year={1997},
	organization={IEEE}
	}
	@inproceedings{eap-abac,
	title={A Comparison of Logical-formula and Enumerated Authorization Policy {ABAC} Models},
	author={Biswas, Prosunjit and Sandhu, Ravi and Krishnan, Ram},
	booktitle={DBSEC},
	pages={},
	year={2016},
	organization={Springer}
	}	
@inproceedings{armando2016smt,
	title={{SMT-based} enforcement and analysis of {NATO} content-based protection and release policies},
	author={Armando, Alessandro and Ranise, Silvio and Traverso, Riccardo and Wrona, Konrad},
	booktitle={Proceedings of the {ACM} International Workshop on Attribute Based Access Control},
	pages={35--46},
	year={2016},
	organization={ACM}
}
@inproceedings{bijon2015mitigating,
	title={Mitigating multi-tenancy risks in {IaaS} cloud through constraints-driven virtual resource scheduling},
	author={Bijon, Khalid and Krishnan, Ram and Sandhu, Ravi},
	booktitle={20th  Symposium on Access Control Models and Technologies},
	pages={63--74},
	year={2015},
	organization={ACM}
}
@article{INCITS526,
	title={{Information technology {-} Next Generation Access Control {-} Generic Operations and Data Structures}},
	author={},
	journal={INCITS 526, American National Standard for Information Technology},
	number={},
	pages={},
	year={},
	publisher={American National Standard for Information Technology}
}



@inproceedings{al2002model,
	title={A model for attribute-based user-role assignment},
	author={Al-Kahtani, Mohammad and Sandhu, Ravi},
	booktitle={18th Annual Proceedings of Computer Security Applications Conference},
	pages={353--362},
	year={2002},
	organization={IEEE}
}

@article{access-control-evaluation,
	title={Guidelines for access control system evaluation metrics},
	author={Hu, Vincent C and Kent, Karen Ann},
	year={2012},
	journal={
	IR 7874},
	publisher={NIST}
}


@article{hu2013guide,
	title={Guide to attribute based access control ({ABAC}) definition and considerations (draft)},
	author={Hu, Vincent C and Ferraiolo, David and Kuhn, Rick and Friedman, Arthur R and Lang, Alan J and Cogdell, Margaret M and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen},
	journal={NIST special publication},
	volume={800},
	pages={162},
	year={2013},
	publisher={Citeseer}
}


@Misc{satisfiability,
	howpublished = {https://en.wikipedia.org/wiki/Satisfiability},
	note = {Accessed November 25, 2015},
	title = {Satisfiability},
	author = {Wikipedia}
}


@Misc{ldap,
	howpublished = {https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol},
	note = {Accessed November 25, 2015},
	title = {{LDAP}},
	author = {Wikipedia}
}



@inproceedings{rbac-with-attribute1,
	Author = {Huang, Jingwei and Nicol, David M and Bobba, Rakesh and Huh, Jun Ho},
	Booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies},
	Organization = {ACM},
	Pages = {187--196},
	Title = {A framework integrating attribute-based policies into role-based access control},
	Year = {2012}}

@inproceedings{sandhu2012authorization,
	Author = {Sandhu, Ravi},
	Booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies},
	Organization = {ACM},
	Pages = {69--70},
	Title = {The authorization leap from rights to attributes: maturation or chaos?},
	Year = {2012}}

@article{xacml,
	Author = {Moses, Tim and others},
	Journal = {Oasis Standard},
	Title = {Extensible access control markup language ({XACML}) version 2.0},
	Volume = {},
	Year = {2005}}

@article{grid-abac,
	Author = {Lang, Bo and Foster, Ian and Siebenlist, Frank and Ananthakrishnan, Rachana and Freeman, Tim},
	Journal = {Journal of Grid Computing},
	Number = {2},
	Pages = {169--180},
	Publisher = {Springer},
	Title = {A flexible attribute based access control method for grid computing},
	Volume = {7},
	Year = {2009}}

@inproceedings{abac-ws,
	Author = {Shen, Hai-bo and Hong, Fan},
	Booktitle = {PDCAT'06.},
	Organization = {IEEE},
	Pages = {74--79},
	Title = {An attribute-based access control model for web services},
	Year = {2006}}

@inproceedings{wang2004logic,
	Author = {Wang, Lingyu and Wijesekera, Duminda and Jajodia, Sushil},
	Booktitle = {Proceedings of FMSE '04},
	Organization = {ACM},
	Pages = {45--55},
	Title = {A logic-based framework for attribute based access control},
	Year = {2004}}

@article{rbac,
	Author = {Sandhu, Ravi S and Coyne, Edward J and Feinstein, Hal L and Youman, Charles E},
	Journal = {IEEE Computer},
	Number = {2},
	Pages = {38--47},
	Publisher = {IEEE},
	Title = {Role-based access control models},
	Year = {1996}}

@inproceedings{attribute-administration,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi},
	Booktitle = {Proceedings. SRAS 2012},
	Organization = {ACM},
	Pages = {7--12},
	Title = {A role-based administration model for attributes},
	Year = {2012}}

\vfill \eject 
@article{hru,
	Author = {Harrison, Michael A and Ruzzo, Walter L and Ullman, Jeffrey D},
	Journal = {Communications of the ACM},
	Number = {8},
	Pages = {461--471},
	Publisher = {ACM},
	Title = {Protection in operating systems},
	Volume = {19},
	Year = {1976}}

@article{abacAlpha,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi S},
	Journal = {DBSec},
	Pages = {41--55},
	Publisher = {Springer},
	Title = {A Unified Attribute-Based Access Control Model Covering {DAC}, {MAC} and {RBAC}.},
	Volume = {12},
	Year = {2012}}

@incollection{hgabac,
	Author = {Servos, Daniel and Osborn, Sylvia L},
	Booktitle = {Foundations and Practice of Security},
	Pages = {187--204},
	Publisher = {Springer},
	Title = {{HGABAC}: Towards a Formal Model of Hierarchical Attribute-Based Access Control},
	Year = {2014}}

@article{nist-rbac,
	Author = {Ferraiolo, David F and Sandhu, Ravi and Gavrila, Serban and Kuhn, D Richard and Chandramouli, Ramaswamy},
	Journal = {ACM TISSEC},
	Number = {3},
	Pages = {224--274},
	Publisher = {ACM},
	Title = {Proposed {NIST} standard for role-based access control},
	Volume = {4},
	Year = {2001}}

@inproceedings{two-sorted-rbac,
	Author = {Kuijper, Wouter and Ermolaev, Victor},
	Booktitle = {Proceedings of the 19th ACM SACMAT},
	Organization = {ACM},
	Pages = {63--74},
	Title = {Sorting out role based access control},
	Year = {2014}}

@article{nist-abac-draft,
	Author = {Hu, Vincent C and Ferraiolo, David and Kuhn, Rick and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen},
	Journal = {NIST Special Publication},
	Pages = {162},
	Title = {Guide to attribute based access control  ({ABAC}) definition and considerations},
	Volume = {800},
	Year = {2014}}

@article{policy-machine,
	Author = {Ferraiolo, David and Atluri, Vijayalakshmi and Gavrila, Serban},
	Journal = {Journal of Systems Architecture},
	Number = {4},
	Pages = {412--424},
	Publisher = {Elsevier},
	Title = {The {Policy} {Machine}: A novel architecture and framework for access control policy specification and enforcement},
	Volume = {57},
	Year = {2011}}

@article{kuhn2010adding,
	Author = {Kuhn, D Richard and Coyne, Edward J and Weil, Timothy R},
	Journal = {IEEE Computer},
	Number = {6},
	Pages = {79--81},
	Publisher = {IEEE},
	Title = {Adding attributes to role-based access control},
	Year = {2010}}

@inproceedings{abac-for-web-service,
	Author = {Yuan, Eric and Tong, Jin},
	Booktitle = {Proceedings of International Conference on Web Service},
	Organization = {IEEE},
	Title = {Attributed based access control {(ABAC)} for web services},
	Year = {2005}}

@inproceedings{policy-composing,
	Author = {Ferraiolo, David F and Gavrila, Serban and Hu, Vincent and Kuhn, D Richard},
	Booktitle = {Proceedings of the 10th ACM SACMAT},
	Organization = {ACM},
	Pages = {11--20},
	Title = {Composing and combining policies under the policy machine},
	Year = {2005}}
@article{abcl,
	title={Constraints Specication in Attribute Based Access Control},
	author={Bijon, Khalid Zaman and Krishman, Ram and Sandhu, Ravi},
	journal={Science},
	volume={2},
	number={3},
	pages={pp--131},
	year={2013}
}

@article{rcl,
	title={Role-based authorization constraints specification},
	author={Ahn, Gail-Joon and Sandhu, Ravi},
	journal={ACM TISSEC},
	volume={3},
	number={4},
	pages={207--226},
	year={2000},
	publisher={ACM}
}

@inproceedings{tripli,
	title={Comparing the expressive power of access control models},
	author={Tripunitara, Mahesh V and Li, Ninghui},
	booktitle={Proceedings of the 11th ACM CCS},
	pages={62--71},
	year={2004},
	organization={}
}
@inproceedings{dsod,
	title={Separation of duty in role-based environments},
	author={Simon, Richard T and Zurko, Mary Ellen},
	booktitle={10th Computer Security Foundations Workshop},
	pages={183--194},
	year={1997},
	organization={IEEE}
}
@article{ucon,
	title={The {UCON} {ABC} usage control model},
	author={Park, Jaehong and Sandhu, Ravi},
	journal={TISSEC},
	volume={},
	number={},
	pages={},
	year={2004},
	publisher={ACM}
}
@inproceedings{biswas2015content,
	title={Content level access control for {Openstack Swift} storage},
	author={Biswas, Prosunjit and Patwa, Farhan and Sandhu, Ravi},
	booktitle={Proceedings of the 5th Conference on Data and Application Security and Privacy},
	pages={123--126},
	year={2015},
	organization={ACM}
}


@article{INCITS526,
	title={{Information technology {-} Next Generation Access Control {-} Generic Operations and Data Structures}},
	author={},
	journal={INCITS 526, ANSI},
	number={},
	pages={},
	year={},
	publisher={}
}


@article{hu2015attribute,
	title={Attribute-based access control},
	author={Hu, Vincent C and Kuhn, D Richard and Ferraiolo, David F},
	journal={IEEE Computer},
	number={2},
	pages={85--88},
	year={2015},
	publisher={IEEE}
}

@inproceedings{al2002model,
	title={A model for attribute-based user-role assignment},
	author={Al-Kahtani, Mohammad and Sandhu, Ravi},
	booktitle={Computer Security Applications Conference, 2002. 18th Annual Proceedings. },
	pages={353--362},
	year={2002},
	organization={IEEE}
}

@article{access-control-evaluation,
	title={Guidelines for access control system evaluation metrics},
	author={Hu, Vincent C and Kent, Karen Ann},
	year={2012},
	journal={NISTIR 7874},
	publisher={NIST}
}

@article{dac,
	title={Access control: principle and practice},
	author={Sandhu, Ravi S and Samarati, Pierangela},
	journal={IEEE Communications Magazine},
	volume={32},
	number={9},
	pages={40--48},
	year={1994},
	publisher={IEEE}
}

@article{hu2013guide,
	title={Guide to attribute based access control ({ABAC}) definition and considerations (draft)},
	author={Hu, Vincent C and Ferraiolo, David and Kuhn, Rick and Friedman, Arthur R and Lang, Alan J and Cogdell, Margaret M and Schnitzer, Adam and Sandlin, Kenneth and Miller, Robert and Scarfone, Karen},
	journal={NIST special publication},
	volume={800},
	pages={162},
	year={2013},
	publisher={Citeseer}
}



@Misc{satisfiability,
	howpublished = {https://en.wikipedia.org/wiki/Satisfiability},
	note = {Accessed November 25, 2015},
	title = {Satisfiability},
	author = {Wikipedia}
}


@inproceedings{rbac-with-attribute1,
	Author = {Huang, Jingwei and Nicol, David M and Bobba, Rakesh and Huh, Jun Ho},
	Booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies},
	Organization = {ACM},
	Pages = {187--196},
	Title = {A framework integrating attribute-based policies into role-based access control},
	Year = {2012}}

@inproceedings{sandhu2012authorization,
	Author = {Sandhu, Ravi},
	Booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies},
	Organization = {ACM},
	Pages = {69--70},
	Title = {The authorization leap from rights to attributes: maturation or chaos?},
	Year = {2012}}

@article{xacml,
	Author = {Moses, Tim and others},
	Journal = {Oasis Standard},
	Title = {Extensible access control markup language ({XACML}) version 2.0},
	Volume = {},
	Year = {2005}}

@article{grid-abac,
	Author = {Lang, Bo and others},
	Journal = {Journal of Grid Computing},
	Number = {2},
	Pages = {169--180},
	Publisher = {Springer},
	Title = {A flexible attribute based access control method for grid computing},
	Volume = {7},
	Year = {2009}}

@inproceedings{abac-ws,
	Author = {Shen, Hai-bo and Hong, Fan},
	Booktitle = {PDCAT'06.},
	Organization = {IEEE},
	Pages = {74--79},
	Title = {An attribute-based access control model for web services},
	Year = {2006}}

@inproceedings{wang2004logic,
	Author = {Wang, Lingyu and Wijesekera, Duminda and Jajodia, Sushil},
	Booktitle = {Proceedings. FMSE '04},
	Organization = {ACM},
	Pages = {45--55},
	Title = {A logic-based framework for attribute based access control},
	Year = {2004}}

@article{rbac,
	Author = {Sandhu, Ravi S and Coyne, Edward J and Feinstein, Hal L and Youman, Charles E},
	Journal = {Computer},
	Number = {2},
	Pages = {38--47},
	Publisher = {IEEE},
	Title = {Role-based access control models},
	Year = {1996}}

@inproceedings{attribute-administration,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi},
	Booktitle = {Proceedings. SRAS 2012},
	Organization = {ACM},
	Pages = {7--12},
	Title = {A role-based administration model for attributes},
	Year = {2012}}

\vfill \eject 
@article{hru,
	Author = {Harrison, Michael A and Ruzzo, Walter L and Ullman, Jeffrey D},
	Journal = {Communications of the ACM},
	Number = {8},
	Pages = {461--471},
	Publisher = {ACM},
	Title = {Protection in operating systems},
	Volume = {19},
	Year = {1976}}

@article{abacAlpha,
	Author = {Jin, Xin and Krishnan, Ram and Sandhu, Ravi S},
	Journal = {DBSec},
	Pages = {41--55},
	Publisher = {Springer},
	Title = {A Unified Attribute-Based Access Control Model Covering {DAC}, {MAC} and {RBAC}.},
	Volume = {12},
	Year = {2012}}

@incollection{hgabac,
	Author = {Servos, Daniel and Osborn, Sylvia L},
	Booktitle = {FPS},
	Pages = {187--204},
	Publisher = {Springer},
	Title = {{HGABAC}: Towards a Formal Model of Hierarchical Attribute-Based Access Control},
	Year = {2014}}

@article{nist-rbac,
	Author = {Ferraiolo, David F and Sandhu, Ravi and Gavrila, Serban and Kuhn, D Richard and Chandramouli, Ramaswamy},
	Journal = {ACM TISSEC},
	Number = {3},
	Pages = {224--274},
	Publisher = {ACM},
	Title = {Proposed {NIST} standard for role-based access control},
	Volume = {4},
	Year = {2001}}

@inproceedings{two-sorted-rbac,
	Author = {Kuijper, Wouter and Ermolaev, Victor},
	Booktitle = {Proceedings of the 19th SACMAT},
	Organization = {ACM},
	Pages = {63--74},
	Title = {Sorting out role based access control},
	Year = {2014}}

@article{nist-abac-draft,
	Author = {Hu, Vincent C and others},
	Journal = {NIST Special Publication},
	Pages = {162},
	Title = {Guide to attribute based access control  ({ABAC}) definition and considerations},
	Volume = {800},
	Year = {2014}}

@article{policy-machine,
	Author = {Ferraiolo, David and others},
	Journal = {JSA},
	Number = {4},
	Pages = {412--424},
	Publisher = {Elsevier},
	Title = {The {Policy} {Machine}: A novel architecture and framework for access control policy specification and enforcement},
	Volume = {57},
	Year = {2011}}


@inproceedings{policy-composing,
	Author = {Ferraiolo, David F and Gavrila, Serban and Hu, Vincent and Kuhn, D Richard},
	Booktitle = {Proceedings of the 10th ACM SACMAT},
	Organization = {ACM},
	Pages = {11--20},
	Title = {Composing and combining policies under the policy machine},
	Year = {2005}}
@article{abcl,
	title={Constraints Specication in Attribute Based Access Control},
	author={Bijon, Khalid Zaman and Krishman, Ram and Sandhu, Ravi},
	journal={Science},
	volume={2},
	number={3},
	pages={pp--131},
	year={2013}
}

@article{rcl,
	title={Role-based authorization constraints specification},
	author={Ahn, Gail-Joon and Sandhu, Ravi},
	journal={ACM TISSEC},
	volume={3},
	number={4},
	pages={207--226},
	year={2000},
	publisher={ACM}
}

@article{tripli,
	title={A theory for comparing the expressive power of access control models},
	author={Tripunitara, Mahesh V and Li, Ninghui},
	journal={Journal of Computer Security},
	volume={15},
	number={2},
	pages={231--272},
	year={2007},
	publisher={IOS Press}
}
@inproceedings{dsod,
	title={Separation of duty in role-based environments},
	author={Simon, Richard T and Zurko, Mary Ellen},
	booktitle={Computer Security Foundations Workshop, 1997. Proceedings., 10th},
	pages={183--194},
	year={1997},
	organization={IEEE}
}
 
@book{lee,
	title={Towards practical and secure decentralized attribute-based authorization systems},
	author={Lee, Adam J},
	year={2008},
	publisher={ProQuest}
}
@inproceedings{bonatti,
	title={Regulating service access and information release on the web},
	author={Bonatti, Piero and Samarati, Pierangela},
	booktitle={Proceedings of CCS},
	pages={134--143},
	year={2000},
	organization={ACM}
}
@article{bonatti2,
	title={A uniform framework for regulating service access and information release on the web},
	author={Bonatti, Piero A and Samarati, Pierangela},
	journal={Journal of Comp. Sec.},
	volume={10},
	number={3},
	pages={241--271},
	year={2002},
	publisher={IOS Press}
}
@inproceedings{damiani2005,
	title={New paradigms for access control in open environments},
	author={Damiani, Ernesto and di Vimercati, S De Capitani and Samarati, Pierangela},
	booktitle={Sig. Proc. and Info. Tech., 2005},
	pages={},
	year={},
	organization={}
}
@MISC{attribute-cert,
	title = {R.: {RFC-3281}. {An} Internet Attribute Certificate Profile for Authorization. {The Internet Society}},
	author = {S. Farrell and R. Housley},
	year = {2002}
}
@inproceedings{abe,
	title={Attribute-based encryption for fine-grained access control of encrypted data},
	author={Goyal, Vipul and Pandey, Omkant and Sahai, Amit and Waters, Brent},
	booktitle={Proc. of CCS},
	pages={89--98},
	year={2006},
	organization={ACM}
}
@incollection{enforcing,
	title={Enforcing Separation of Duty in Attribute Based Access Control Systems},
	author={Jha, Sadhana and Sural, Shamik and Atluri, Vijayalakshmi and Vaidya, Jaideep},
	booktitle={Information System Security},
	pages={61--78},
	year={2015},
	publisher={Springer}
}
@inproceedings{mining,
	title={Mining attribute-based access control policies from {RBAC} policies},
	author={Xu, Zhongyuan and Stoller, Scott D},
	booktitle={CEWIT2013},
	pages={1--6},
	year={2013},
	organization={IEEE}
}
@inproceedings{ontologies,
	title={Supporting attribute-based access control with ontologies},
	author={Priebe, Torsten and Dobmeier, Wolfgang and Kamprath, Nora},
	booktitle={ARES},
	pages={8--pp},
	year={2006},
	organization={IEEE}
}
@inproceedings{mell2016restricting,
	title={Restricting Insider Access Through Efficient Implementation of Multi-Policy Access Control Systems},
	author={Mell, Peter and Shook, James M and Gavrila, Serban},
	booktitle={Proceedings of the International Workshop on Managing Insider Security Threats},
	pages={13--22},
	year={2016},
	organization={ACM}
}
@inproceedings{jin2012role,
	title={A role-based administration model for attributes},
	author={Jin, Xin and Krishnan, Ram and Sandhu, Ravi},
	booktitle={Proceedings of the 1st International Workshop on Secure and Resilient Architectures and Systems},
	pages={7--12},
	year={2012},
	organization={ACM}
}

@inproceedings{biswas2016attribute,
	title={An Attribute-Based Protection Model for {JSON} Documents},
	author={Biswas, Prosunjit and Sandhu, Ravi and Krishnan, Ram},
	booktitle={International Conference on Network and System Security},
	pages={303--317},
	year={2016},
	organization={Springer}
}

@inproceedings{gupta2016mathrm,
	title={The {GURA$_G$} Administrative Model for User and Group Attribute Assignment},
	author={Gupta, Maanak and Sandhu, Ravi},
	booktitle={Int. Conference on Network and Sys. Security},
	pages={318--332},
	year={2016},
	organization={Springer}
}
@inproceedings{elliott2010role,
	title={Role Explosion: Acknowledging the Problem.},
	author={Elliott, Aaron and Knight, Scott},
	booktitle={Software Engineering Research and Practice},
	pages={349--355},
	year={2010}
}

@inproceedings{alshehriaccess,
	title={Access Control Models for Cloud-Enabled Internet of Things: A Proposed Architecture and Research Agenda},
	author={Alshehri, Asma and Sandhu, Ravi},
	booktitle={Proceedings of the Workshop on Privacy in Collaborative \& Social Computing},
	pages={},
	year={2016}
}
@inproceedings{bhattattribute,
	title={An Attribute-Based Access Control Extension for OpenStack and its Enforcement Utilizing the Policy Machine},
	author={Bhatt, Smriti and Patwa, Farhan and Sandhu, Ravi},
	booktitle={International Conference on Network and System Security},
	pages={},
	year={2016}
}

@article{li2013scalable,
	title={Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption},
	author={Li, Ming and Yu, Shucheng and Zheng, Yao and Ren, Kui and Lou, Wenjing},
	journal={IEEE Transactions on Parallel and Distributed Systems},
	volume={24},
	number={1},
	pages={131--143},
	year={2013},
	publisher={IEEE}
}

@inproceedings{gupta2016mathrm,
	title={The$\backslash$ mathrm $\{$GURA\_G$\}$ Administrative Model for User and Group Attribute Assignment},
	author={Gupta, Maanak and Sandhu, Ravi},
	booktitle={International Conference on Network and System Security},
	pages={318--332},
	year={2016},
	organization={Springer}
}
@inproceedings{jin2014role,
	title={Role and attribute based collaborative administration of intra-tenant cloud IaaS},
	author={Jin, Xin and Krishnan, Ram and Sandhu, Ravi},
	booktitle={International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom)},
	pages={261--274},
	year={2014},
	organization={IEEE}
}
@article{ngo2016multi,
	title={Multi-tenant attribute-based access control for cloud infrastructure services},
	author={Ngo, Canh and Demchenko, Yuri and de Laat, Cees},
	journal={Journal of Information Security and Applications},
	volume={27},
	pages={65--84},
	year={2016},
	publisher={Elsevier}
}
@inproceedings{cha2012design,
	title={Design of attribute-based access control in cloud computing environment},
	author={Cha, ByungRae and Seo, JaeHyun and Kim, JongWon},
	booktitle={Proceedings of the International Conference on IT Convergence and Security},
	pages={41--50},
	year={2012},
	organization={Springer}