Access Control in Dynamic XML-Based Web-Services with X-RBAC. - Rafae Bhatti; James Joshi; Elisa Bertino; Arif Ghafoor (ICWS, 2003)

X-GTRBAC admin: a decentralized administration model for enterprise wide access control. - Rafae Bhatti; James Joshi; Elisa Bertino; Arif Ghafoor (SACMAT, 2004)

A Policy Framework for Access Management in Federated Information Sharing. - Rafae Bhatti; Elisa Bertino; Arif Ghafoor (IICIS, 2004)

XML-Based Specification for Web Services Document Security. - Rafae Bhatti; Elisa Bertino; Arif Ghafoor; James Joshi (Computer, 2004)

Access-Control Language for Multidomain Environments. - James Joshi; Rafae Bhatti; Elisa Bertino; Arif Ghafoor (IEEE Internet Comput., 2004)

Distributed Access Management in Multimedia IDCs. - Rafae Bhatti; Basit Shafiq; Mohamed Shehab; Arif Ghafoor (Computer, 2005)

A Trust-Based Context-Aware Access Control Model for Web-Services. - Rafae Bhatti; Elisa Bertino; Arif Ghafoor (Distributed Parallel Databases, 2005)

X-GTRBAC: an XML-based policy specification framework and architecture for enterprise-wide access control. - Rafae Bhatti; Arif Ghafoor; Elisa Bertino; James Joshi (ACM Trans. Inf. Syst. Secur., 2005)

X-gtrbac admin: A decentralized administration model for enterprise-wide access control. - Rafae Bhatti; Basit Shafiq; Elisa Bertino; Arif Ghafoor; James Joshi (ACM Trans. Inf. Syst. Secur., 2005)

Policy-based security management for federated healthcare databases (or RHIOs). - Rafae Bhatti; Khalid Moidu; Arif Ghafoor (HIKM, 2006)

X-FEDERATE: A Policy Engineering Framework for Federated Access Management. - Rafae Bhatti; Elisa Bertino; Arif Ghafoor (IEEE Trans. Software Eng., 2006)

A policy engineering framework for federated access management - Rafae Bhatti (2006)

A Policy-Based Authorization Framework for Web Services: Integrating XGTRBAC and WS-Policy. - Rafae Bhatti; Daniel Sanz; Elisa Bertino; Arif Ghafoor (ICWS, 2007)

Towards Improved Privacy Policy Coverage in Healthcare Using Policy Refinement. - Rafae Bhatti; Tyrone Grandison (Secure Data Management, 2007)

Deadline and QoS Aware Data Warehouse. - Wen-Syan Li; Dengfeng Gao; Rafae Bhatti; Inderpal Narang; Hirofumi Matsuzawa; Masayuki Numao; Masahiro Ohkawa; Takeshi Fukuda (VLDB, 2007)

An integrated approach to federated identity and privilege management in open systems. - Rafae Bhatti; Elisa Bertino; Arif Ghafoor (Commun. ACM, 2007)

Engineering a Policy-Based System for Federated Healthcare Databases. - Rafae Bhatti; Arjmand Samuel; Mohamed Y. Eltabakh; Haseeb Amjad; Arif Ghafoor (IEEE Trans. Knowl. Data Eng., 2007)

Enabling policy-based access control in BI applications. - Rafae Bhatti; Dengfeng Gao; Wen-Syan Li (Data Knowl. Eng., 2008)

Policy Mapper: Administering Location-Based Access-Control Policies. - Rafae Bhatti; Maria Luisa Damiani; David W. Bettis; Elisa Bertino (IEEE Internet Comput., 2008)

Scalable and Effective Test Generation for Role-Based Access Control Systems. - Ammar Masood; Rafae Bhatti; Arif Ghafoor; Aditya P. Mathur (IEEE Trans. Software Eng., 2009)

HIPAA Compliance and Patient Privacy Protection. - Tyrone Grandison; Rafae Bhatti (MedInfo, 2010)

Regulatory Compliance and the Correlation to Privacy Protection in Healthcare. - Tyrone Grandison; Rafae Bhatti (Int. J. Comput. Model. Algorithms Medicine, 2010)

Emerging trends around big data analytics and security: panel. - Rafae Bhatti; Ryan LaSalle; Rob Bird; Tim Grance; Elisa Bertino (SACMAT, 2012)

Enforcing Minimum Necessary Access in Healthcare Through Integrated Audit and Access Control. - Paul D. Martin 002; Aviel D. Rubin; Rafae Bhatti (BCB, 2013)

Access Control in Social Enterprise Applications: An Empirical Evaluation. - Rafae Bhatti; Camille Gaspard; Cristina Nita-Rotaru (ICDCS Workshops, 2013)