检索结果-内蒙古大学图书馆

International symposium on Intelligent Systems and Informatics (SISY)

作者： Milan Segedinac Zora Konjović Dušan Surla Goran Savić Department of Computing and Control Faculty of technical Sciences Novi Sad Serbia Department of Mathematics and Informatics Faculty of Sciences Novi Sad Serbia

Learning opportunities play an important role in the vision of curriculum favored by the Bologna Process. this paper proposes an ontology intended for representing learning opportunities. the ontology is designed in accordance with European standardized models addressing metadata sufficient for representing learning opportunities. Since the models are proposed as Dublin Core application profiles, the ontology has been implemented following a set of guidelines for expressing Dublin Core application profiles using OWL. Proposed ontology facilitates the introduction of Semantic Web technologies in the field of curriculum management, and will bi a start-point for the implementation of a Semantic Web application aimed at curriculum management.

关键词： Ontologies OWL Europe Education Standards IP networks XML

来源：评论

学校读者我要写书评

暂无评论

Hardware-enhanced access control for cloud computing 12

Hardware-enhanced access control for cloud computing

引用

Proceedings of the 17th acm symposium on access control models and technologies

作者： Ruby B. Lee Princeton University Princeton NJ USA

ISBN: (纸本)9781450312950

Future trustworthy computer systems should provide built-in support for at least the cornerstone security properties of confidentiality, integrity and availability. access control can help significantly towards achieving this. However, in today's computing landscape, traditional access control implemented only in software may be either insufficient or non-optimal. We discuss some of these situations. Furthermore, fine-grained access control and usage control mechanisms implemented in software are themselves subject to attack, and may impose heavy performance overheads. Can new hardware architecture improve the security achievable by software mechanisms for access control and usage control? If so, what types of hardware support are most useful while retaining the flexibility of software protection mechanisms? What can software do, to help hardware achieve the best results?With the trend towards Cloud Computing, we discuss how new hardware architectural features for cloud servers can help protect the confidentiality and integrity of a cloud customer's code and data in his leased Virtual Machines -- even when the powerful underlying hypervisor may be compromised. this uses a new, non-bypassable form of hardware access control. Without requiring new hardware, we can also leverage the hardware trend towards manycore chips, and the already available hardware virtualization features, to enhance Cloud Security -- but with a few restrictions and some new software *** general, we would like to motivate collaborations between the software security and the hardware architecture communities to explore software-hardware co-design for security. What comes beyond access control in cloud computing and mobile computing ecosystems? the goal is to design future trustworthy systems that provide security protections, at the levels needed, when needed, even with malware in the system.

关键词： security architecture hardware-software co-design hardware security cloud computing virtualization

来源：评论

学校读者我要写书评

暂无评论

access control for a federated police information system 11

Access control for a federated police information system

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Hudnall, Matthew Mitchell, Maury Parrish, Allen Center for Advanced Public Safety University of Alabama Tuscaloosa AL 35487-0290 United States Alabama Criminal Justice Info. Center 201 South Union Street Montgomery AL 36130 United States

ISBN: (纸本)9781450307215

关键词： Law enforcement

来源：评论

学校读者我要写书评

暂无评论

xfACL: An extensible functional language for access control 11

xfACL: An extensible functional language for access control

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Ni, Qun Bertino, Elisa Department of Computer Science Purdue University W. Lafayette IN 47906 United States

ISBN: (纸本)9781450307215

the main goal of modern access control policy languages is to offer high-level languages, by using which security officers and application developers can express a large variety of access restrictions and isolate the security logic from the application logic. However, the current state-of-the-art language, XacmL, suffers from some design flaws and lacks important features, such as those that characterize the RBAC model. therefore, we propose an access control language that combines the benefits of both XacmL and RBAC while avoiding their drawbacks. © 2011 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Semantic web-based social network access control

引用

COMPUTERS & SECURITY 2011年第2-3期30卷 108-115页

作者： Carminati, Barbara Ferrari, Elena Heatherly, Raymond Kantarcioglu, Murat thuraisingham, Bhavani Univ Texas Dallas Richardson TX 75080 USA Univ Insubria Varese Italy

the existence of online social networks that include person specific information creates interesting opportunities for various applications ranging from marketing to community organization. On the other hand, security and privacy concerns need to be addressed for creating such applications. Improving social network access control systems appears as the first step toward addressing the existing security and privacy concerns related to online social networks. To address some of the current limitations, we have created an experimental social network using synthetic data which we then use to test the efficacy of the semantic reasoning based approaches we have previously suggested. (C) 2010 Elsevier Ltd. All rights reserved.

关键词： Social network access control Semantic inference Experimentation Implementation

来源：评论

学校读者我要写书评

暂无评论

SEAL: A logic programming framework for specifying and verifying access control models 11

SEAL: A logic programming framework for specifying and verif...

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Naldurg, Prasad Raghavendra, K.R. Microsoft Research India Bangalore India Indian Institute of Science Bangalore India

ISBN: (纸本)9781450307215

We present SEAL, a language for specification and analysis of safety properties for label-based access control systems. A SEAL program represents a possibly infinite-state non-deterministic transition system describing the dynamic behavior of entities and their relevant access control operations. the features of our language are derived directly from the need to model new access control features arising from state-of-the art models in Windows 7, Asbestos, HiStar and others. We show that the reachability problem for this class of models is undecidable even for simple SEAL programs, but a bounded model-checking algorithm is able to validate interesting properties and discover relevant attacks. © 2011 acm.

关键词： Model checking

来源：评论

学校读者我要写书评

暂无评论

Detecting and Resolving Policy Misconfigurations in access-control Systems 08

Detecting and Resolving Policy Misconfigurations in Access-C...

引用

13th acm symposium on access control models and technologies

作者： Bauer, Lujo Garriss, Scott Reiter, Michael K. Carnegie Mellon Univ Pittsburgh PA 15213 USA Google Mountain View CA 94043 USA Univ N Carolina Dept Comp Sci Chapel Hill NC 27599 USA

ISBN: (纸本)9781605581293

access-control policy misconfigurations that cause requests to be erroneously denied can result in wasted time, user frustration, and, in the context of particular applications (e. g., health care), very severe consequences. In this article we apply association rule mining to the history of accesses to predict changes to access-control policies that are likely to be consistent with users' intentions, so that these changes can be instituted in advance of misconfigurations interfering with legitimate accesses. Instituting these changes requires the consent of the appropriate administrator, of course, and so a primary contribution of our work is how to automatically determine from whom to seek consent and how to minimize the costs of doing so. We show using data from a deployed access-control system that our methods can reduce the number of accesses that would have incurred costly time-of-access delays by 43%, and can correctly predict 58% of the intended policy. these gains are achieved without impacting the total amount of time users spend interacting with the system.

关键词： Experimentation Human Factors Security access control policy inference machine learning

来源：评论

学校读者我要写书评

暂无评论

Relationship-based access control policies and their policy languages 11

Relationship-based access control policies and their policy ...

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Fong, Philip W.L. Siahaan, Ida Department of Computer Science University of Calgary Calgary AL Canada

ISBN: (纸本)9781450307215

the Relationship-Based access control (ReBAC) model was recently proposed as a general-purpose access control model. It supports the natural expression of parameterized roles, the composition of policies, and the delegation of trust. Fong proposed a policy language that is based on Modal Logic for expressing and composing ReBAC policies. A natural question is whether such a language is representationally complete, that is, whether the language is capable of expressing all ReBAC policies that one is interested in expressing. In this work, we argue that the extensive use of what we call Relational Policies is what distinguishes ReBAC from traditional access control models. We show that Fong's policy language is representationally incomplete in that certain previously studied Relational Policies are not expressible in the language. We introduce two extensions to the policy language of Fong, and prove that the extended policy language is representationally complete with respect to a well-defined subclass of Relational Policies. © 2011 acm.

关键词： Computer circuits

来源：评论

学校读者我要写书评

暂无评论

Anomaly discovery and resolution in Web access control policies 11

Anomaly discovery and resolution in Web access control polic...

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Hu, Hongxin Ahn, Gail-Joon Kulkarni, Ketan Arizona State University Tempe AZ 85287 United States

ISBN: (纸本)9781450307215

the advent of emerging technologies such asWeb services, serviceoriented architecture, and cloud computing has enabled us to perform business services more efficiently and effectively. However, we still suffer from unintended security leakages by unauthorized actions in business services while providing more convenient services to Internet users through such a cutting-edge technological growth. Furthermore, designing and managing Web access control policies are often error-prone due to the lack of effective analysis mechanisms and tools. In this paper, we represent an innovative policy anomaly analysis approach for Web access control policies. We focus on XacmL (eXtensible access control Markup Language) policy since XacmL has become the de facto standard for specifying and enforcing access control policies for various Webbased applications and services. We introduce a policy-based segmentation technique to accurately identify policy anomalies and derive effective anomaly resolutions. We also discuss a proof-ofconcept implementation of our method called XAnalyzer and demonstrate how efficiently our approach can discover and resolve policy anomalies. © 2011 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Program synthesis in administration of higher-order permissions 11

Program synthesis in administration of higher-order permissi...

引用

Proceedings of the 16th acm symposium on access control models and technologies

作者： Bruns, Glenn Huth, Michael Avijit, Kumar Bell Labs Alcatel-Lucent United States Imperial College London United Kingdom Carnegie Mellon University United States

ISBN: (纸本)9781450307215

In "administrative" access control, policy controls permissions not just on application actions, but also on actions to modify permissions, on actions to modify permissions on those actions, and so on. One context of work in administrative policy is "administrative RBAC", in which policy controls the permissions of roles, the membership of roles, and other elements of RBAC access-control state. Here we study and extend the UARBAC model for administrative RBAC from the perspective of usability and expressiveness. Using tools from logic and program verification, we formulate UARBAC logically and develop an algorithm that produces "administrative plans" that achieve specified permissions through permitted actions. this work is closely related to work on the safety problem in administrative access control, but aims to aid legitimate users in understanding how to reach a desired access-control state. We then show how this machinery can be used so that ad- ministrative actions at any desired depth, and so plans as well, can be uniformly simulated in the UARBAC model. © 2011 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：