An Access Control Perspective on the Science of Security

Ravi Sandhu is Executive Director of the Institute for Cyber Security and Lead PI of the NSF Center for Security and Privacy Enhanced Cloud Computing at the University of Texas at San Antonio, where he holds the Lutcher Brown Endowed Chair. Previously he served on the faculty at George Mason University (1989-2007) and Ohio State University (1982-1989).  He holds BTech and MTech degrees from IIT Bombay and Delhi, and MS and PhD degrees from Rutgers University.  He is a Fellow of IEEE, ACM and AAAS, and has received numerous awards from IEEE, ACM, NSA, NIST and IFIP.  A prolific and highly cited author, his research has been funded by NSF, NSA, NIST, DARPA, AFOSR, ONR, AFRL, ARO and private industry.  His seminal papers on role-based access control established it as the dominant form of access control in practical systems.  His numerous other models and mechanisms have also had considerable real-world impact.  He served as Editor-in-Chief of the IEEE Transactions on Dependable and Secure Computing, and previously as founding Editor-in-Chief of ACM Transactions on Information and System Security.  He was Chairman of ACM SIGSAC, and founded the ACM Conference on Computer and Communications Security, the ACM Symposium on Access Control Models and Technologies and the ACM Conference on Data and Application Security and Privacy.  He has served as General Chair, Steering Committee Chair, Program Chair and Committee Member for numerous security conferences.  He has consulted for leading industry and government organizations, and has lectured all over the world.  He is an inventor on 30 security technology patents and has accumulated over 39,000 Google Scholar citations for his papers.  At the Institute for Cyber Security his research projects include attribute-based access control, secure cloud computing, secure Internet of Things, secure information sharing, social computing security, and secure data provenance. 

His web site is at www.profsandhu.com

ABSTRACT

Access Control is an essential component of cyber security since the emergence of the cyber discipline in the late 1960s.  There can be no science of security without a strong influence from a science of access control.  Ravi Sandhu will share his perspective on insights from his and his collaborators intensive research on the science of access control, and its significance for the bigger science of security.