Roles in information security - A survey and classification of the research area

Fuchs, L. and Pernul, G. and Sandhu, R. (2011) Roles in information security - A survey and classification of the research area. COMPUTERS & SECURITY, 30 (8). pp. 748-769. ISSN 0167-4048, 1872-6208

Full text not available from this repository. (Request a copy)

Abstract

The concept of roles has been prevalent in the area of Information Security for more than 15 years already. It promises simplified and flexible user management, reduced administrative costs, improved security, as well as the integration of employees' business functions into the IT administration. A comprehensive scientific literature collection revealed more than 1300 publications dealing with the application of sociological role theory in the context of Information Security up to now. Although there is an ANSI/NIST standard and an ISO standard proposal, a variety of competing models and interpretations of the role concept have developed. The major contribution of this survey is a categorization of the complete underlying set of publications into different classes. The main part of the work is investigating 32 identified research directions, evaluating their importance and analyzing research tendencies. An electronic bibliography including all surveyed publications together with the classification information is provided additionally. As a final contribution potential future developments in the area of role-research are considered. (C) 2011 Elsevier Ltd. All rights reserved.

Item Type: Article
Uncontrolled Keywords: ACCESS-CONTROL; SYSTEMS; MODELS; RBAC; Role-based access control; RBAC; Role theory; Information Security; Survey
Subjects: 000 Computer science, information & general works > 004 Computer science
300 Social sciences > 330 Economics
Divisions: Business, Economics and Information Systems > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul)
Depositing User: Dr. Gernot Deinzer
Date Deposited: 27 May 2020 05:51
Last Modified: 27 May 2020 05:51
URI: https://pred.uni-regensburg.de/id/eprint/19830

Actions (login required)

View Item View Item