检索结果-内蒙古大学图书馆

20th acm symposium on access control models and technologies, SacmAT 2015

作者： Han, Weili Zhang, Yin Guo, Zeqing Bertino, Elisa Software School Fudan University Shanghai Key Laboratory of Data Science Shanghai201203 China Department of Computer Science Purdue University West LafayetteIN47907 United States

ISBN: (纸本)9781450335560

With the support of the Internet of things (IoT for short) technologies, tracking systems are being widely deployed in many companies and organizations in order to provide more efficient and trustworthy delivery services. Such systems usually support easy-to-use interfaces, by which users can visualize the shipping status and progress of merchandise, according to business data which are collected directly from the merchandise through sensing technologies. However, these business data may include sensitive business information, which should be strongly protected in cross-organization scenarios. thus, it is critical for suppliers that the disclosure of such data to unauthorized users is prevented in the context of the open environment of these tracking systems. As business data from different suppliers and organizations are usually associated together with merchandise being shipped, it is also important to support fine-grained confidentiality control. In this paper, we articulate the problem of finegrained business data confidentiality control in IoT-enabled cross-organizational tracking systems. We then propose a fine-grained confidentiality control mechanism, referred to as xCP-ABE, to address the problem in the context of open environment. the xCP-ABE mechanism is a novel framework which makes suppliers in tracking systems able to selectively authorize specific sets of users to access their sensitive business data and satisfies the confidentiality of transmission path of goods. We develop a prototype of the xCP-ABE mechanism, and then evaluate its performance. We also carry out a brief security analysis of our proposed mechanism. Our evaluation and analysis show that our framework is an effective and efficient solution to ensure the confidentiality of business data in cross-organizational tracking systems. © Copyright 2015 acm.

关键词： Internet of things

来源：评论

学校读者我要写书评

暂无评论

Dynamic Game access control based on Trust 14

Dynamic Game Access Control based on Trust

引用

Joint 14th IEEE Int Conf on Trust, Secur and Privacy in Comp and Commun / 13th IEEE Int symposium on Parallel and Distributed Proc with Applications / 9th IEEE Int Conf on Big Data Science and Engineering (IEEE TrustCom-ISPA-BigDataSE)

作者： Ma, Shunan Chinese Acad Sci Inst Informat Engn State Key Lab Informat Secur Beijing Peoples R China

ISBN: (纸本)9781467379526

access control refers to the whole suite of mechanisms that are used to govern user access to resources provided by computer systems over networks. Although many access control models have been proposed, such as DAC, MAC and RBAC, the functionality of these access control models is to make authorization decisions based on established access control policies. When the malicious access is identified, the access control system denies the request. However, the malicious entities may keep issuing more malicious access requests not afraid of punishment from the access control system. Such access control models are not adequate in open networks where the identities of entities may not be known. In this paper, we first apply some principles in game theory to analyze current access control models. With respect to behavior of entities, access control can be treated as a game between the requester and the provider entities. then we propose a dynamic game access control model based on trust, which can respond to malicious access. the proposed model should follow the principles of bringing interactive entities to a state of Nash Equilibrium to make access control more effective. In the proposed model, we use access behavior trigger strategy along with a constraint mechanism that provides incentives for entities to perform honest access.

关键词： Trust access control Game theory Network Security

来源：评论

学校读者我要写书评

暂无评论

Investments in smart nano-control systems in cold supply chains 13

Investments in smart nano-control systems in cold supply cha...

引用

13th International symposium on Operational Research, SOR 2015

作者： Bogataj, David Bogataj, Marija Drobne, Damjana Ros-McDonnell, Lorenzo Rudolf, Rebeka Hudoklin, Domen MEDIFAS-CERRISK Mednarodni Prehod 6 Vrtojba Šempeter pri GoriciSI-5290 Slovenia University of Ljubljana LjubljanaSI-1000 Slovenia Technical University Cartagena ETSII C/Dr. Fleming s/n Cartagena30202 Spain University of Maribor Slomškov trg 15 2000 Slovenia

ISBN: (纸本)9789616165457

Fruit and Vegetable Supply Chain Management (F&V SCM) requires more intelligent technology to improve postharvest loss prevention;however, the current technology has to be improved to reduce the lead times and perishability dynamics in an intelligent F&V supply chain. this can be achieved by developing a more accurate environmental monitoring using advanced measurement techniques and by introducing new gold nanoparticle sensors (Au-NP-sensors) which would allow direct sensing of rotting or decaying. this paper presents the possibility how to measure the impact of these technologies on the management of fruit and vegetable supply chains, i.e. from packaging, warehousing to fruit and vegetable distribution, and thus improving the supply chain safety by tracking and tracing cargo and its environment. the evaluation of these new technologies is proposed through the Net Present Value approach of extended MRP models.

关键词： Time delay

来源：评论

学校读者我要写书评

暂无评论

***: Building the Next Generation Web3D Repository with AngularJS and X3DOM 15

***: Building the Next Generation Web3D Repository with Angu...

引用

20th International acm symposium on 3D Web technologies (Web3D)

作者： Scully, Timothy Dobos, Jozef Sturm, Timo Jung, Yvonne 3D Repo Ltd London England Fraunhofer IGD Darmstadt Germany Hsch Fulda Fulda Germany

ISBN: (纸本)9781450336475

this paper presents a novel open source web-based 3D version control system positioned directly within the context of the recent strategic plan for digitising the construction sector in the United Kingdom. the aim is to achieve reduction of cost and carbon emissions in the built environment by up to 20% simply by properly managing digital information and 3D models. Even though previous works in the field concentrated mainly on defining novel WebGL frameworks and later on the efficiency of 3D data delivery over the Internet, there is still the emerging need for a practical solution that would provide ubiquitous access to 3D assets, whether it is for large international enterprises or individual members of the general public. We have, therefore, developed a novel platform leveraging the latest open web-based technologies such as AngularJS and X3DOM in order to define an industrial-strength collaborative cloud hosting service 3drepo. io. Firstly, we introduce the work and outline the high-level system architecture as well as improvements in relation to previous work. Next, we describe database and frontend considerations with emphasis on scalability and enhanced security. Finally, we present several performance measurement experiments and a selection of real-life industrial use cases. We conclude that jQuery provides performance benefits over AngularJS when manipulating large scene graphs in web browsers.

关键词： AngularJS X3DOM 3D Repo version control BIM

来源：评论

学校读者我要写书评

暂无评论

Trust-based formal delegation framework for Enterprise Social Networks 14

Trust-based formal delegation framework for Enterprise Socia...

引用

作者： Bouchami, Ahmed Perrin, Olivier Zahoor, Ehtesham Univ Lorraine LORIA BP 239 F-54506 Vandoeuvre Les Nancy France Natl Univ Comp & Emerging Sci FAST NU Islamabad Pakistan

ISBN: (纸本)9781467379526

Collaborative environments raise major challenges to secure them. these challenges increase when it comes to the domain of Enterprise-Social-Networks (ESNs) as ESNs aim to incorporate the social technologies in an organization setup while asserting greater control of information security. In this context, the security challenges have taken a new shape as an ESN may not be limited to the boundaries of a single organization and users from different organizations can collaborate in a common federated environment. In this paper, we address the problem of the authorization's delegation in federated collaborative environments like ESNs. In contrast to traditional XML based languages, such as XacmL, our approach is based on event-calculus, a temporal logic programming formalism. Further, the traditional approaches are either user-centric or organization-centric. However, the domain of ESN requires to bridge the gap between them and the proposed framework deals with this challenge. In order to enhance the delegation scheme, we have proposed a behavior monitoring mechanism, that permits to assess principals' trust level within the federated collaborative environment. We evaluate our trust computing approach based on simulated principals' behaviors and discuss the obtained results.

关键词： access control Collaboration Delegation Enterprise social networking Event-Calculus Security Trust delegation Trust access control Electronic Serial Number Nonprofit Organizations trust Security principal Extensible access control Markup Language

来源：评论

学校读者我要写书评

暂无评论

Shuffle Index: Efficient and Private access to Outsourced Data

引用

acm TRANSACTIONS ON STORAGE 2015年第4期11卷 19-19页

作者： di Vimercati, Sabrina De Capitani Foresti, Sara Paraboschi, Stefano Pelosi, Gerardo Samarati, Pierangela Univ Milan Dipartimento Informat I-26013 Crema CR Italy Univ Bergamo Dipartimento Ingn Gest Informaz & Prod I-24044 Dalmine BG Italy Politecn Milan Dipartimento Elettron Informaz & Bioingn I-20133 Milan MI Italy

Data outsourcing and cloud computing have been emerging at an ever-growing rate as successful approaches for allowing users and companies to rely on external services for storing and managing data. As data and access to them are not under the control of the data owner, there is a clear need to provide proper confidentiality protection. Such requirements concern the confidentiality not only of the stored data (content) but also of the specific accesses (or patterns of them) that users make on such data. In this article, we address these issues and propose an approach for guaranteeing content, access, and pattern confidentiality in a data outsourcing scenario. the proposed solution is based on the definition of a shuffle index structure, which adapts traditional B+-trees and, by applying a combination of techniques (covers, caches, and shuffling), ensures confidentiality of the data and of queries over them, protecting each single access as well as sequences thereof. the proposed solution also supports update operations over the data, while making reads and writes not recognizable as such by the server. We show that the shuffle index exhibits a limited performance cost, thus resulting effectively usable in practice.

关键词： Security Design Management Shuffle index private access content confidentiality access confidentiality pattern confidentiality

来源：评论

学校读者我要写书评

暂无评论

Dynamic Game access control based on Trust

Dynamic Game Access Control based on Trust

引用

IEEE International Conference on Trust, Security and Privacy in Computing and Communications

作者： Shunan Ma State Key Lab. of Inf. Security Inst. of Inf. Eng. Beijing China

ISBN: (纸本)9781467379533

关键词： Trust access control Game theory Network Security

来源：评论

学校读者我要写书评

暂无评论

Attribute-Based access control models and Beyond 15

Attribute-Based Access Control Models and Beyond

引用

Proceedings of the 10th acm symposium on Information, Computer and Communications Security

作者： Ravi Sandhu University of Texas at San Antonio USA

ISBN: (纸本)9781450332453

this talk will provide a perspective on attribute-based access control (ABAC). the ongoing authorization leap from rights to attributes offers numerous compelling benefits. Decisions about user, subject, object and context attributes can be made relatively independently and with suitable decentralization appropriate for each attribute. Policies can be formulated by security architects to translate from attributes to rights. Dynamic elements can be built into these policies so the outcomes of access control decisions automatically adapt to changing local and global circumstances. On the benefits side this leap is a maturation of authorization matching the needs of emerging cyber technologies and systems. On the risks side devolving attribute management may lead to attributes of questionable provenance and value, with attendant possibility of new channels for social engineering and malware attacks. We argue that the potential benefits will lead to pervasive deployment of attribute-based access control, and more generally attribute-based security. the cyber security research community has a responsibility to develop models, theories and systems which enable safe and chaos-free deployment of ABAC. this is a current grand challenge.

关键词： authorization access control

来源：评论

学校读者我要写书评

暂无评论

Challenges in Making access control Sensitive to the "Right" Contexts 15

Challenges in Making Access Control Sensitive to the "Right"...

引用

Proceedings of the 20th acm symposium on access control models and technologies

作者： Trent Jaeger Pennsylvania State University University Park PA USA

ISBN: (纸本)9781450335560

access control is a fundamental security mechanism that both protects processes from attacks and confines compromised processes that may try to propagate an attack. Nonetheless, we still see an ever increasing number of software vulnerabilities. Researchers have long proposed that improvements in access control could prevent many vulnerabilities, many of which capture contextual information to more accurately detect obviously unsafe operations. However, developers are often hesitant to extend their access control mechanisms to use more sensitive access control policies. My experience leads me to propose that it is imperative that an access control systems be able to extract context accurately and efficiently and be capable of inferring any non-trivial policies. In this talk, I will discuss some recent research that enforces context-sensitive policies by either extracting process context, integrating code to extract context from programs, or extracting user context. We find that context-sensitive mechanisms can prevent some obviously unsafe operations from being authorized efficiently and discuss our experiences in inferring access control policies. Based on this research, we are encouraged that future research may enable context-sensitive access control policies to be produced and enforced to prevent vulnerabilities.

关键词： capabilities context-sensitive program analysis

来源：评论

学校读者我要写书评

暂无评论

Redaction based RDF access control Language 14

Redaction based RDF Access Control Language

引用

19th acm symposium on access control models and technologies (SacmAT)

作者： Rachapalli, Jyothsna Khadilkar, Vaibhav Kantarcioglu, Murat thuraisingham, Bhavani Univ Texas Dallas Richardson TX 75083 USA

ISBN: (纸本)9781450329392

We propose an access control language for securing RDF graphs which essentially leverages an underlying query language based redaction mechanism to provide fine grained RDF access control. the access control language presented is equipped with critical features such as policy resolution and cascading policies that are essential for fine grained RDF access control. We present the architecture of our system which primarily features a flexible, scalable and general purpose RDF access control mechanism.

关键词： access control RDF SPARQL Redaction

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：