检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

462 篇 会议
21 篇 期刊文献

馆藏范围

483 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

405 篇 工学
- 372 篇 计算机科学与技术...
- 165 篇 软件工程
- 81 篇 控制科学与工程
- 59 篇 信息与通信工程
- 38 篇 电气工程
- 10 篇 安全科学与工程
- 6 篇 机械工程
- 6 篇 电子科学与技术（可...
- 5 篇 动力工程及工程热...
- 4 篇 材料科学与工程（可...
- 4 篇 环境科学与工程（可...
- 3 篇 水利工程
- 3 篇 化学工程与技术
- 3 篇 城乡规划学
- 3 篇 网络空间安全
- 2 篇 力学（可授工学、理...
- 2 篇 建筑学
- 2 篇 石油与天然气工程
40 篇 管理学
- 27 篇 图书情报与档案管...
- 17 篇 管理科学与工程(可...
- 7 篇 工商管理
30 篇 理学
- 21 篇 数学
- 7 篇 统计学（可授理学、...
- 5 篇 物理学
- 2 篇 化学
- 2 篇 生物学
- 2 篇 系统科学
8 篇 法学
- 8 篇 社会学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
1 篇 教育学
1 篇 农学

主题

156 篇 access control
26 篇 security
17 篇 rbac
14 篇 authorization
12 篇 privacy
9 篇 role-based acces...
8 篇 internet of thin...
8 篇 xacml
8 篇 relationship-bas...
8 篇 attribute-based ...
8 篇 control system a...
8 篇 usage control
7 篇 analytical model...
6 篇 xml
5 篇 abac
5 篇 traffic control
5 篇 authentication
5 篇 access control m...
5 篇 design
5 篇 semantics

机构

8 篇 purdue univ w la...
6 篇 purdue univ dept...
5 篇 carnegie mellon ...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
3 篇 colorado state u...
3 篇 univ kent sch co...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 suny stony brook...
3 篇 tennessee techno...
2 篇 univ waterloo wa...
2 篇 univ trento dept...
2 篇 univ genoa dipar...
2 篇 ecole polytech f...
2 篇 beihang univ eco...
2 篇 univ. of texas d...

作者

19 篇 bertino elisa
10 篇 crampton jason
10 篇 lobo jorge
10 篇 sandhu ravi
9 篇 li ninghui
9 篇 ahn gail-joon
8 篇 ray indrakshi
6 篇 zannone nicola
6 篇 tripunitara mahe...
6 篇 thuraisingham bh...
6 篇 stoller scott d.
6 篇 carminati barbar...
6 篇 iyer padmavathi
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 vaidya jaideep
5 篇 molloy ian
5 篇 beznosov konstan...
5 篇 ferrara anna lis...
5 篇 kerschbaum flori...

语言

473 篇 英文
8 篇 其他
1 篇 西班牙文
1 篇 中文

检索条件"任意字段=13th ACM Symposium on Access Control Models and Technologies"

共 483 条记录，以下是181-190 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Automated inference of access control policies For web applications 15

Automated inference of access control policies For web appli...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Le, Ha thanh Nguyen, Cu D. Briand, Lionel Hourte, Benjamin University of Luxembourg Luxembourg Luxembourg HITEC Luxembourg S.A. LuxembourgL-1458 Luxembourg

ISBN: (纸本)9781450335560

In this paper, we present a novel, semi-automated approach to infer access control policies automatically for web-based applications. Our goal is to support the validation of implemented access control policies, even when they have not been clearly specified or documented. We use role-based access control as a reference model. Built on top of a suite of security tools, our approach automatically exercises a system under test and builds access spaces for a set of known users and roles. then, we apply a machine learning technique to infer access rules. Inconsistent rules are then analysed and fed back to the process for further testing and improvement. Finally, the inferred rules can be validated based on prespecified rules if they exist. Otherwise, the inferred rules are presented to human experts for validation and for detecting access control issues. We have evaluated our approach on two applications;one is open source while the other is a proprietary system built by our industry partner. the obtained results are very promising in terms of the quality of inferred rules and the access control vulnerabilities it helped detect. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Preventing information inference in access control 15

Preventing information inference in access control

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Paci, Federica Zannone, Nicola University of Southampton United Kingdom Eindhoven University of Technology Netherlands

ISBN: (纸本)9781450335560

Technological innovations like social networks, personal devices and cloud computing, allow users to share and store online a huge amount of personal data. Sharing personal data online raises significant privacy concerns for users, who feel that they do not have full control over their data. A solution often proposed to alleviate users' privacy concerns is to let them specify access control policies that reflect their privacy constraints. However, existing approaches to access control often produce policies which either are too restrictive or allow the leakage of sensitive information. In this paper, we present a novel access control model that reduces the risk of information leakage. the model relies on a data model which encodes the domain knowledge along with the semantic relations between data. We illustrate how the access control model and the reasoning over the data model can be automatically translated in XacmL. We evaluate and compare our model with existing access control models with respect to its effectiveness in preventing leakage of sensitive information and efficiency in authoring policies. the evaluation shows that the proposed model allows the definition of effective access control policies that mitigate the risks of inference of sensitive data while reducing users' effort in policy authoring compared to existing models. © Copyright 2015 acm.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

Relationship-based access control for an open-source medical records system 15

Relationship-based access control for an open-source medical...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Rizvi, Syed Zain R. Fong, Philip W.L. Crampton, Jason Sellwood, James University of Calgary AB Canada Royal Holloway University of London Egham United Kingdom

ISBN: (纸本)9781450335560

Inspired by the access control models of social network systems, Relationship-Based access control (ReBAC) was recently proposed as a general-purpose access control paradigm for application domains in which authorization must take into account the relationship between the access requestor and the resource owner. the healthcare domain is envisioned to be an archetypical application domain in which ReBAC is sorely needed: e.g., my patient record should be accessible only by my family doctor, but not by all doctors. In this work, we demonstrate for the first time that ReBAC can be incorporated into a production-scale medical records system, OpenMRS, with backward compatibility to the legacy RBAC mechanism. Specifically, we extend the access control mechanism of OpenMRS to enforce ReBAC policies. Our extensions incorporate and extend advanced ReBAC features recently proposed by Crampton and Sellwood. In addition, we designed and implemented the first administrative model for ReBAC. In this paper, we describe our ReBAC implementation, discuss the system engineering lessons learnt as a result, and evaluate the experimental work we have undertaken. In particular, we compare the performance of the various authorization schemes we implemented, thereby demonstrating the feasibility of ReBAC. © Copyright 2015 acm.

关键词： Authorization

来源：评论

学校读者我要写书评

暂无评论

Federated access management for collaborative network environments: Framework and case study 15

Federated access management for collaborative network enviro...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Rubio-Medrano, Carlos E. Zhao, Ziming Doupé, Adam Ahn, Gail-Joon Arizona State University TempeAZ United States

ISBN: (纸本)9781450335560

With the advent of various collaborative sharing mechanisms such as Grids, P2P and Clouds, organizations including private and public sectors have recognized the benefits of being involved in inter-organizational, multi-disciplinary, and collaborative projects that may require diverse resources to be shared among participants. In particular, an environment that often makes use of a group of high-performance network facilities would involve large-scale collaborative projects and tremendously seek a robust and flexible access control for allowing collaborators to leverage and consume resources, e.g., computing power and bandwidth. In this paper, we propose a federated access management scheme that leverages the notion of attributes. Our approach allows resource-sharing organizations to provide distributed provisioning (publication, location, communication, and evaluation) of both attributes and policies for federated access management purposes. Also, we provide a proof-of-concept implementation that leverages distributed hash tables (DHT) to traverse chains of attributes and effectively handle the federated access management requirements devised for inter-organizational resource sharing and collaborations. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Mitigating access control vulnerabilities through interactive static analysis 15

Mitigating access control vulnerabilities through interactiv...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Zhu, Jun Chu, Bill Lipford, Heather thomas, Tyler University of North Carolina at Charlotte CharlotteNC28223 United States

ISBN: (纸本)9781450335560

access control vulnerabilities due to programming errors have consistently ranked amongst top software vulnerabilities. Previous research efforts have concentrated on using automatic program analysis techniques to detect access control vulnerabilities in applications. We report a comparative study of six open source PHP applications, and find that implicit assumptions of previous research techniques can significantly limit their effectiveness. We propose a more effective hybrid approach to mitigate access control vulnerabilities. Developers are reminded in-situ of potential access control vulnerabilities, where self-review of code can help them discover mistakes. Additionally, developers are prompted for application-specific access control knowledge, providing samples of code that could be thought of as static analysis by example. these examples are turned into code patterns that can be used in performing static analysis to detect additional access control vulnerabilities and alert the developer to take corrective actions. Our evaluation of six open source applications detected 20 zero-day access control vulnerabilities in addition to finding all access control vulnerabilities detected in previous works. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

On missing attributes in access control: Non-deterministic and probabilistic attribute retrieval 15

On missing attributes in access control: Non-deterministic a...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Crampton, Jason Morisset, Charles Zannone, Nicola Royal Holloway University of London United Kingdom Newcastle University United Kingdom Eindhoven University of Technology Netherlands

ISBN: (纸本)9781450335560

Attribute Based access control (ABAC) is becoming the reference model for the specification and evaluation of access control policies. In ABAC policies and access requests are defined in terms of pairs attribute names/values. the applicability of an ABAC policy to a request is determined by matching the attributes in the request with the attributes in the policy. Some languages supporting ABAC, such as PTaCL or XacmL 3.0, take into account the possibility that some attributes values might not be correctly retrieved when the request is evaluated, and use complex decisions, usually describing all possible evaluation outcomes, to account for missing attributes. In this paper, we argue that the problem of missing attributes in ABAC can be seen as a non-deterministic attribute retrieval process, and we show that the current evaluation mechanism in PTaCL or XacmL can return a complex decision that does not necessarily match with the actual possible outcomes. this, however, is problematic for the enforcing mechanism, which needs to resolve the complex decision into a conclusive one. We propose a new evaluation mechanism, explicitly based on non-deterministic attribute retrieval for a given request. We extend this mechanism to probabilistic attribute retrieval and implement a probabilistic policy evaluation mechanism for PTaCL in PRISM, a probabilistic model-checker. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Mohawk+T: Efficient analysis of administrative temporal role-based access control (ATRBAC) policies 15

Mohawk+T: Efficient analysis of administrative temporal role...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Shahen, Jonathan Niu, Jianwei Tripunitara, Mahesh University of Waterloo Canada University of Texas San Antonio United States

ISBN: (纸本)9781450335560

Safety analysis is recognized as a fundamental problem in access control. It has been studied for various access control schemes in the literature. Recent work has proposed an administrative model for Temporal Role-Based access control (TRBAC) policies called Administrative TRBAC (ATRBAC). We address ATRBAC-safety. We first identify that the problem is PSPACE-complete. this is a much tighter identification of the computational complexity of the problem than prior work, which shows only that the problem is decidable. With this result as the basis, we propose an approach that leverages an existing open-source software tool called Mohawk to address ATRBAC-safety. Our approach is to efficiently reduce ATRBAC-safety to ARBAC-safety, and then use Mohawk. We have conducted a thorough empirical assessment. In the course of our assessment, we came up with a "reduction toolkit," which allows us to reduce Mohawk+T input instances to instances that existing tools support. Our results suggest that there are some input classes for which Mohawk+T outperforms existing tools, and others for which existing tools outperform Mohawk+T. the source code for Mohawk+T is available for public download. © Copyright 2015 acm.

关键词： Open source software

来源：评论

学校读者我要写书评

暂无评论

Towards an automatic top-down role engineering approach using natural language processing techniques 15

Towards an automatic top-down role engineering approach usin...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Narouei, Masoud Takabi, Hassan Department of Computer Science and Engineering University of North Texas DentonTX United States

ISBN: (纸本)9781450335560

Role Based access control (RBAC) is the most widely used model for access control due to the ease of administration as well as economic benefits it provides. In order to deploy an RBAC system, one requires to first identify a complete set of roles. this process, known as role engineering, has been identified as one of the costliest tasks in migrating to RBAC. In this paper, we propose a top-down role engineering approach and take the first steps towards using natural language processing techniques to extract policies from unrestricted natural language documents. Most organizations have high-level requirement specifications that include a set of access control policies which describes allowable operations for the system. However, it is very time consuming, labor-intensive, and error-prone to manually sift through these natural language documents to identify and extract access control policies. Our goal is to automate this process to reduce manual efforts and human errors. We apply natural language processing techniques, more specifically semantic role labeling to automatically extract access control policies from unrestricted natural language documents, define roles, and build an RBAC model. Our preliminary results are promising and by applying semantic role labeling to automatically identify predicate-argument structure, and a set of predefined rules on the extracted arguments, we were able correctly identify access control policies with a precision of 75%, recall of 88%, and F1 score of 80%. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

A logic of trust for reasoning about delegation and revocation 15

A logic of trust for reasoning about delegation and revocati...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Cramer, Marcos Ambrossio, Diego Agustín Van Hertum, Pieter University of Luxembourg Luxembourg KU Leuven Belgium

ISBN: (纸本)9781450335560

In ownership-based access control frameworks with the possibility of delegating permissions and administrative rights, chains of delegated accesses will form. there are different ways to treat these delegation chains when revoking rights, which give rise to different revocation schemes. Hagström et al. [8] proposed a framework for classifying revocation schemes, in which the different revocation schemes are defined graph-theoretically;they motivate the revocation schemes in this framework by presenting various scenarios in which the agents have different reasons for revocating. this paper is based on the observation that there are some problems with Hagström et al.'s definitions of the revocation schemes, which have led us to propose a refined framework with new graph-theoretic definitions of the revocation schemes. In order to formally study the merits and demerits of various definitions of revocation schemes, we propose to apply the axiomatic method originating in social choice theory to revocation schemes. For formulating an axiom, i.e. a desirable property of revocation frameworks, we propose a logic, Trust Delegation Logic (TDL), with which one can formalize the different reasons an agent may have for performing a revocation. We show that our refined graph-theoretic definitions of the revocation schemes, unlike Hagström et al.'s original definitions, satisfy the desirable property that can be formulated using TDL.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Towards a general framework for optimal role mining: A constraint satisfaction approach 15

Towards a general framework for optimal role mining: A const...

引用

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Jafarian, Jafar Haadi Takabi, Hassan Touati, Hakim Hesamifard, Ehsan Shehab, Mohamed Department of Software and Information Systems University of North Carolina at Charlotte CharlotteNC United States Department of Computer Science and Engineering University of North Texas DentonTX United States

ISBN: (纸本)9781450335560

Role Based access control (RBAC) is the most widely used advanced access control model deployed in a variety of organizations. To deploy an RBAC system, one needs to first identify a complete set of roles, including permission role assignments and role user assignments. this process, known as role engineering, has been identified as one of the costliest tasks in migrating to RBAC. Since many organizations already have some form of user permission assignments defined, it makes sense to identify roles from this existing information. this process, known as role mining, has gained significant interest in recent years and numerous role mining techniques have been developed that take into account the characteristics of the core RBAC model, as well as its various extended features and each is based on a specific optimization metric. In this paper, we propose a generic approach which transforms the role mining problem into a constraint satisfaction problem. the transformation allows us to discover the optimal RBAC state based on customized optimization metrics. We also extend the RBAC model to include more context-aware and application specific constraints. these extensions broaden the applicability of the model beyond the classic role mining to include features such as permission usage, hierarchical role mining, hybrid role engineering approaches, and temporal RBAC models. We also perform experiments to show applicability and effectiveness of the proposed approach. © Copyright 2015 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共49页 << < 15 16 17 18 19 20 21 22 23 24 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：