David F. Ferraiolo

David F. Ferraiolo, Serban I. Gavrila, Wayne A. Jansen: Enabling an Enterprise-Wide, Data-Centric Operating Environment. IEEE Computer 46(4): 94-96 (2013)

David F. Ferraiolo, Jeffrey M. Voas, George F. Hurlburt: A Matter of Policy. IT Professional 14(2): 4-7 (2012)

David F. Ferraiolo, Vijayalakshmi Atluri, Serban I. Gavrila: The Policy Machine: A novel architecture and framework for access control policy specification and enforcement. Journal of Systems Architecture - Embedded Systems Design 57(4): 412-424 (2011)

Vijay Alturi, David F. Ferraiolo: Role-Based Access Control. Encyclopedia of Cryptography and Security (2nd Ed.) 2011: 1053-1055

Vincent C. Hu, David F. Ferraiolo, Serban I. Gavrila: Specification of attribute relations for access control policies and constraints using Policy Machine. IAS 2010: 32-35

David F. Ferraiolo, D. Richard Kuhn: Role-Based Access Controls. CoRR abs/0903.2171 (2009)

David F. Ferraiolo, Vijay Atluri: A meta model for access control: why is it needed and is it even possible to achieve? SACMAT 2008: 153-154

David F. Ferraiolo, D. Richard Kuhn, Ravi S. Sandhu: RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role-Based Access Control". IEEE Security & Privacy 5(6): 51-53 (2007)

Vincent C. Hu, David F. Ferraiolo, Karen Scarfone: Access Control Policy Combinations for the Grid Using the Policy Machine. CCGRID 2007: 225-232

Vincent C. Hu, Karen Scarfone, Serban I. Gavrila, David F. Ferraiolo: A trust domain management schema for multiple grid environments. Infoscale 2007: 17

Vincent C. Hu, D. Richard Kuhn, David F. Ferraiolo: The Computational Complexity of Enforceability Validation for Generic Access Control Rules. SUTC (1) 2006: 260-267

David F. Ferraiolo, Indrakshi Ray (Eds.): SACMAT 2006,11th ACM Symposium on Access Control Models and Technologies, Lake Tahoe, California, USA, June 7-9, 2006, Proceedings. ACM 2006, isbn 1-59593-353-0

David F. Ferraiolo, Serban I. Gavrila, Vincent C. Hu, D. Richard Kuhn: Composing and combining policies under the policy machine. SACMAT 2005: 11-20

David F. Ferraiolo, Ramaswamy Chandramouli, Gail-Joon Ahn, Serban I. Gavrila: The role control center: features and case studies. SACMAT 2003: 12-20

David F. Ferraiolo, Ravi S. Sandhu, Serban I. Gavrila, D. Richard Kuhn, Ramaswamy Chandramouli: Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur. 4(3): 224-274 (2001)

Vincent C. Hu, Deborah A. Frincke, David F. Ferraiolo: The Policy Machine for Security Policy Management. International Conference on Computational Science (2) 2001: 494-506

Timothy Fraser, David F. Ferraiolo, Mikel L. Matthews, Casey Schaufler, Stephen Smalley, Robert Watson: Panel: which access control technique will provide the greatest overall benefit-Abstract. SACMAT 2001: 141

David F. Ferraiolo: An argument for the role-based access control model. SACMAT 2001: 142-143

Pablo Galiasso, Oliver Bremer, John Hale, Sujeet Shenoi, David F. Ferraiolo, Vincent C. Hu: Policy Mediation for Multi-Enterprise Environments. ACSAC 2000: 100-106

Ravi S. Sandhu, David F. Ferraiolo, D. Richard Kuhn: The NIST model for role-based access control: towards a unified standard. ACM Workshop on Role-Based Access Control 2000: 47-63

David F. Ferraiolo, John F. Barkley, D. Richard Kuhn: A Role-Based Access Control Model and Reference Implementation within a Corporate Intranet. ACM Trans. Inf. Syst. Secur. 2(1): 34-64 (1999)

David F. Ferraiolo: User's Perspectives (Panel Session). ACM Workshop on Role-Based Access Control 1999: 67

David F. Ferraiolo: Products and Tools (Panel Session). ACM Workshop on Role-Based Access Control 1999: 131

Virgil D. Gligor, Serban I. Gavrila, David F. Ferraiolo: On the Formal Definition of Separation-of-Duty Policies and their Composition. IEEE Symposium on Security and Privacy 1998: 172-183

David F. Ferraiolo, John F. Barkley: Specifying and managing role-based access control within a corporate intranet. ACM Workshop on Role-Based Access Control 1997: 77-82

David F. Ferraiolo, D. Richard Kuhn: Future directions in role-based access control. ACM Workshop on Role-Based Access Control 1995