| 2005 | Rule support for role-based access control. | Axel Kern, Claudia Walhorn |
| 2005 | Relevancy based access control of versioned XML documents. | Mizuho Iwaihara, Somchai Chatvichienchai, Chutiporn Anutariya, Vilas Wuwongse |
| 2005 | Context sensitive access control. | R. J. Hulsebosch, Alfons H. Salden, Mortaza S. Bargh, P. W. G. Ebben, J. Reitsma |
| 2005 | Composing and combining policies under the policy machine. | David F. Ferraiolo, Serban I. Gavrila, Vincent C. Hu, D. Richard Kuhn |
| 2005 | Integrity constraints in trust management. | Sandro Etalle, William H. Winsborough |
| 2005 | A reference monitor for workflow systems with constrained task execution. | Jason Crampton |
| 2005 | AC-XML documents: improving the performance of a web access control module. | Barbara Carminati, Elena Ferrari |
| 2005 | Purpose based access control of complex data for privacy protection. | Ji-Won Byun, Elisa Bertino, Ninghui Li |
| 2005 | Provable bounds for portable and flexible privacy-preserving access. | Marina Blanton, Mikhail J. Atallah |
| 2005 | Future direction of access control models, architectures, and technologies. | Konstantin Beznosov |
| 2005 | GEO-RBAC: a spatially aware RBAC. | Elisa Bertino, Barbara Catania, Maria Luisa Damiani, Paolo Perlasca |
| 2005 | Supporting conditional delegation in secure workflow management systems. | Vijayalakshmi Atluri, Janice Warner |
| 2004 | A logical specification for usage control. | Xinwen Zhang, Jaehong Park, Francesco Parisi-Presicce, Ravi S. Sandhu |
| 2004 | Towards a formal model for security policies specification and validation in the selinux system. | Giorgio Zanin, Luigi V. Mancini |
| 2004 | Role-based access control in ambient and remote space. | Horst F. Wedde, Mario Lischka |
| 2004 | A role-based approach to access control for XML databases. | Jingzhu Wang, Sylvia L. Osborn |
| 2004 | Role-based cascaded delegation. | Roberto Tamassia, Danfeng Yao, William H. Winsborough |
| 2004 | Using uml to visualize role-based access control constraints. | Indrakshi Ray, Na Li, Robert B. France, Dae-Kyoo Kim |
| 2004 | A composite rbac approach for large, complex organizations. | Joon S. Park, Keith P. Costello, Teresa M. Neven, Josh A. Diosomito |
| 2004 | Security analysis in role-based access control. | Ninghui Li, Mahesh V. Tripunitara |
| 2004 | Administrative scope in the graph-based framework. | Manuel Koch, Luigi V. Mancini, Francesco Parisi-Presicce |
| 2004 | A meta model for authorisations in application security systems and their integration into RBAC administration. | Axel Kern, Martin Kuhlmann, Rainer Kuropka, Andreas Ruthert |
| 2004 | Resolving constraint conflicts. | Trent Jaeger, Reiner Sailer, Xiaolan Zhang |
| 2004 | Implementing access control to people location information. | Urs Hengartner, Peter Steenkiste |
| 2004 | Specifying access control policies for XML documents with XPath. | Irini Fundulaki, Maarten Marx |