What's Wrong with Access Control in the Real World?
Sara Sinclair, Sean W. Smith · IEEE Security & Privacy · 2010
This article enumerates some simplifying assumptions the security community has made in its effort to gain traction with the access control problem. For many environments, a dramatic and painful mismatch seems to exist between these simplifying assumptions and reality. The authors argue that effective security in these environments might therefore require rethinking these assumptions.