David Ferraiolo
David Ferraiolo
Manager, Secure Systems & Applications Group, NIST
Verified email at
Cited by
Cited by
Role-based access controls
DF Ferraiolo, R Kuhn
Proc. of 15th NIST-NSA National Computer Security Conference, 1992
A role-based access control model and reference implementation within a corporate intranet
DF Ferraiolo, JF Barkley, DR Kuhn
ACM Transactions on Information and System Security (TISSEC) 2 (1), 34-64, 1999
Proposed NIST standard for role-based access control
DF Ferraiolo, R Sandhu, S Gavrila, DR Kuhn, R Chandramouli
ACM Transactions on Information and System Security (TISSEC) 4 (3), 224-274, 2001
The NIST model for role-based access control: towards a unified standard
R Sandhu, D Ferraiolo, R Kuhn
ACM workshop on Role-based access control 10 (344287.344301), 2000
Guide to attribute based access control (abac) definition and considerations (draft)
VC Hu, D Ferraiolo, R Kuhn, AR Friedman, AJ Lang, MM Cogdell, ...
NIST special publication 800 (162), 1-54, 2013
Attribute-based access control
VC Hu, DR Kuhn, DF Ferraiolo, J Voas
Computer 48 (2), 85-88, 2015
On the formal definition of separation-of-duty policies and their composition
VD Gligor, SI Gavrila, D Ferraiolo
Proceedings. 1998 IEEE Symposium on Security and Privacy (Cat. No. 98CB36186 …, 1998
Assessment of access control systems
VC Hu, D Ferraiolo, DR Kuhn
US Department of Commerce, National Institute of Standards and Technology, 2006
An examination of federal and commercial access control policy needs
MN Lynch
National Computer Security Conference, 1993 (16th) Proceedings: Information …, 1995
Role based access control for the world wide web
J Barkley, A Cincotta, D Ferraiolo, S Gavrila, DR Kuhn
20th National Computer Security Conference 991, 331-340, 1997
Rbac standard rationale: Comments on" a critique of the ansi standard on role-based access control"
D Ferraiolo, R Kuhn, R Sandhu
IEEE Security & Privacy 5 (6), 51-53, 2007
Extensible access control markup language (XACML) and next generation access control (NGAC)
D Ferraiolo, R Chandramouli, R Kuhn, V Hu
Proceedings of the 2016 ACM International Workshop on Attribute Based Access …, 2016
Method and system for the specification and enforcement of arbitrary attribute-based access control policies
DF Ferraiolo, SI Gavrila
US Patent App. 12/366,855, 2009
The Policy Machine: A novel architecture and framework for access control policy specification and enforcement
D Ferraiolo, V Atluri, S Gavrila
Journal of Systems Architecture 57 (4), 412-424, 2011
Role-Based Access Control. Artech House
DF Ferraiolo, DR Kuhn, R Chandramouli
Inc., Norwood, MA, USA, 2003
Specifying and managing role-based access control within a corporate intranet
D Ferraiolo, J Barkley
Proceedings of the second ACM workshop on Role-based access control, 77-82, 1997
Composing and combining policies under the policy machine
DF Ferraiolo, S Gavrila, V Hu, DR Kuhn
Proceedings of the tenth ACM symposium on Access control models and …, 2005
The role control center: Features and case studies
DF Ferraiolo, R Chandramouli, GJ Ahn, SI Gavrila
Proceedings of the eighth ACM symposium on Access control models and …, 2003
An access control scheme for big data processing
VC Hu, T Grance, DF Ferraiolo, DR Kuhn
10th IEEE International Conference on Collaborative Computing: Networking …, 2014
An introduction to role-based access control
D Ferraiolo, R Kuhn
NIST/ITL Bulletin, 1995
The system can't perform the operation now. Try again later.
Articles 1–20