角色驱动的访问控制：实践与外文文献翻译应用

4星 · 超过85%的资源需积分: 10 67 浏览量更新于2024-09-17 3 收藏 35KB DOC 举报

"本文档探讨了'Practical Role-Based Access Control'（PRBAC），一篇发表在《信息安全期刊》上的文章，由泰勒撰写，并由版权和弗朗西斯集团有限公司发行。该文章从一个综合和角色基础的角度来审视访问控制，重点是从实践而非理论的角度介绍Role-Based Access Control（RBAC）。首先，文章对访问控制进行了定义，并引入了两个安全的访问控制模型，以此作为RBAC深入讨论的基础。文章以一个抽象模型的形式阐述了访问控制，随后通过一系列实例对比了RBAC与简单访问控制模型之间的差异。作者明确指出，尽管RBAC并非万能的解决方案，它在某些情况下可能会适得其反，但当正确实施在合适的环境中，RBAC确实能够为组织带来经济、安全和责任效益。例如，代理权限（surrogacy）被作为RBAC的一个关键特性，它在实践中通过大幅度减少授权工作量，提高了效率。文章还关注了如何从更简单的访问控制形式转向更为复杂的RBAC，这涉及到策略转换和系统设计的考量。在整个过程中，作者强调了RBAC实施时需根据具体环境进行定制，以实现最佳效果。通过这篇文章，读者可以深入了解RBAC的基本原理、适用场景以及其实现策略，这对于进行毕业设计的外文文献翻译和相关领域研究者来说，提供了实用且深入的理解和参考。"

外文文献原文

Practical Role-Based Access Control

“此文选自信息安全期刊”，作者：泰勒©版权和弗朗西斯集团有限公司

ABSTRACT This article presents access control from a general and a role based

perspective. The article’s focus is role based Access Control from a practical vice a theoretical

perspective. The article starts with some access control definitions and two secure access control

models. Access control is then presented in context of an abstract model, as preface to an in-depth

assessment of

Role Based Access Control (RBAC).

Several examples contrast RBAC and the simple access control model. The

article does not portray RBAC as a panacea, optimal for all situations. Indeed,it is feely

admitted that RBAC may be counterproductive in some instances.But the point is also made that

RBAC, when properly implemented in an appropriate environment, can reward the organization

with economic, security and accountability benefits.

Surrogacy is discussed as an essential RBAC attribute and, in practical terms, as a

means of drastically reducing authorization volume.

Lastly, the article touches on converting from simpler forms of access control to the

more complex RBAC.

KEYWORDS access control list, ACL, discretionary access control, DAC,

NtK, principle of least privilege, PLP, mandatory access control, MAC, role based access control,

RBAC

INTRODUCTION

Many of us are casually familiar with Role-based Access Control (RBAC). It sounds

simple enough; the name tells the story. Of course, there is more to RBAC than a name. As is so

often true, the devil lurks within the details.Although RBAC is often presented from a theoretical

or mathematical perspective, for the most part this paper will navigate those infernal details in

practical terms.We begin with some definitions of access control. Next, we examine RBAC’s

predecessor, Simple Access Control (SAC). Like SAC, RBAC employs “deny all, permit by

下载后可阅读完整内容，剩余3页未读，立即下载

wangxiaomei2012

粉丝: 0
资源: 1

角色驱动的访问控制：实践与外文文献翻译应用

学生档案管理开题报告及外文文献翻译指南

SSM毕业论文外文文献翻译资料整理

Java技术核心特性：外文文献翻译

单片机外文文献翻译单片机外文文献翻译.doc

计算机相关的外文文献翻译_springboot外文文献翻译,springboot外文翻译

KAITIBAOGAO.rar_KAITIBAOGAO_外文 翻译_外文文献_外文文献翻译_文献翻译

外文文献翻译及原文_电气专业Integrated-wiring-system综合布线系统大学毕业论文外文文献翻译及原文.doc

JAVA外文文献翻译

JAVAWeb外文文献翻译

毕业设计外文文献翻译

最新资源

KAITIBAOGAO.rar_KAITIBAOGAO_外文翻译_外文文献_外文文献翻译_文献翻译