activity
20102024
most citedPath Conditions and Principal Matching: A New Approach to Access Control

54 citations · 119 across the 24 of their papers we have counts for

collaborators
Showing cs.CRShow all

20 papers · 1 filter

cs.CR2024

Bi-objective Optimization in Role Mining

Jason Crampton, Eduard Eiben, Gregory Gutin +2

Role mining is a technique used to derive a role-based authorization policy from an existing policy. Given a set of users , a set of permissions and a user-permission author…

cs.CR2021

Towards Better Understanding of User Authorization Query Problem via Multi-variable Complexity Analysis

Jason Crampton, Gregory Gutin, Diptapriyo Majumdar

User authorization queries in the context of role-based access control have attracted considerable interest in the last 15 years. Such queries are used to determine whether it is p…

cs.CR2017★ 1 cited

Canonical Completeness in Lattice-Based Languages for Attribute-Based Access Control

Jason Crampton, Conrad Williams

The study of canonically complete attribute-based access control (ABAC) languages is relatively new. A canonically complete language is useful as it is functionally complete and pr…

cs.CR2016★ 1 cited

The Authorization Policy Existence Problem

Pierre Bergé, Jason Crampton, Gregory Gutin +1

Constraints such as separation-of-duty are widely used to specify requirements that supplement basic authorization policies. However, the existence of constraints (and authorizatio…

cs.CR2016

Cryptographic Enforcement of Information Flow Policies without Public Information via Tree Partitions

Jason Crampton, Naomi Farley, Gregory Gutin +2

We may enforce an information flow policy by encrypting a protected resource and ensuring that only users authorized by the policy are able to decrypt the resource. In most schemes…

cs.CR2015

The Bi-Objective Workflow Satisfiability Problem and Workflow Resiliency

Jason Crampton, Gregory Gutin, Daniel Karapetyan +1

A computerized workflow management system may enforce a security policy, specified in terms of authorized actions and constraints, thereby restricting which users can perform parti…