检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

442 篇 会议
20 篇 期刊文献

馆藏范围

462 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

379 篇 工学
- 354 篇 计算机科学与技术...
- 157 篇 软件工程
- 82 篇 控制科学与工程
- 34 篇 信息与通信工程
- 23 篇 电气工程
- 9 篇 安全科学与工程
- 5 篇 机械工程
- 5 篇 仪器科学与技术
- 5 篇 电子科学与技术（可...
- 5 篇 交通运输工程
- 3 篇 力学（可授工学、理...
- 3 篇 材料科学与工程（可...
- 3 篇 动力工程及工程热...
- 3 篇 网络空间安全
- 2 篇 光学工程
- 2 篇 冶金工程
- 2 篇 建筑学
44 篇 管理学
- 28 篇 图书情报与档案管...
- 21 篇 管理科学与工程(可...
- 8 篇 工商管理
25 篇 理学
- 20 篇 数学
- 4 篇 统计学（可授理学、...
- 2 篇 物理学
- 2 篇 生物学
- 2 篇 系统科学
15 篇 法学
- 12 篇 社会学
- 3 篇 法学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
1 篇 教育学
1 篇 农学

主题

150 篇 access control
23 篇 security
17 篇 rbac
16 篇 authorization
13 篇 privacy
11 篇 internet of thin...
11 篇 analytical model...
9 篇 role-based acces...
9 篇 relationship-bas...
9 篇 attribute-based ...
8 篇 xacml
8 篇 control system a...
8 篇 usage control
7 篇 media access pro...
6 篇 throughput
6 篇 quality of servi...
6 篇 wireless lan
5 篇 abac
5 篇 policy mining
5 篇 xml

机构

7 篇 purdue univ w la...
6 篇 carnegie mellon ...
6 篇 purdue univ dept...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 suny stony brook...
3 篇 univ kent sch co...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
2 篇 univ waterloo wa...
2 篇 univ trento dept...
2 篇 univ genoa dipar...
2 篇 ecole polytech f...
2 篇 univ. of texas d...
2 篇 department of co...
2 篇 university of so...
2 篇 colorado state u...

作者

19 篇 bertino elisa
10 篇 lobo jorge
9 篇 li ninghui
9 篇 crampton jason
9 篇 sandhu ravi
9 篇 ahn gail-joon
7 篇 ray indrakshi
7 篇 stoller scott d.
6 篇 zannone nicola
6 篇 tripunitara mahe...
6 篇 thuraisingham bh...
6 篇 carminati barbar...
6 篇 xu dianxiang
6 篇 iyer padmavathi
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 vaidya jaideep
5 篇 molloy ian
5 篇 beznosov konstan...
5 篇 ferrara anna lis...

语言

448 篇 英文
9 篇 其他
4 篇 中文
1 篇 葡萄牙文

检索条件"任意字段=14th ACM Symposium on Access Control Models and Technologies"

共 462 条记录，以下是111-120 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Brokering Policies and Execution Monitors for IoT Middleware 19

Brokering Policies and Execution Monitors for IoT Middleware

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Carranza, Juan Carlos Fuentes Fong, Philip W. L. Univ Calgary Calgary AB Canada

ISBN: (纸本)9781450367530

Event-based systems lie at the heart of many cloud-based Internet-of-things (IoT) platforms. this combination of the Broker architectural style and the Publisher-Subscriber design pattern provides a way for smart devices to communicate and coordinate with one another. the present design of these cloud-based IoT frameworks lacks measures to (i) protect devices against malicious cloud disconnections, (ii) impose information flow control among communicating parties, and (iii) enforce coordination protocols in the presence of compromised devices. In this work, we propose to extend the modular event-based system architecture of Fiege et al., to incorporate brokering policies and execution monitors, in order to address the three protection challenges mentioned above. We formalized the operational semantics of our protection scheme, explored how the scheme can be used to enforce BLP-style information flow control and RBAC-style protection domains, implemented the proposal in an open-source MQTT broker, and evaluated the performance impact of the protection mechanisms.

关键词： Internet of things Middleware MQTT access control Brokering Policy Execution Monitor Edit Automata Information Flow control History-Based access control Performance Evaluation

来源：评论

学校读者我要写书评

暂无评论

A Rule-based Approach to the Decidability of Safety of ABACα 19

A Rule-based Approach to the Decidability of Safety of ABACα

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Marin, Mircea Kutsia, Temur Dundua, Besik West Univ Timisoara Timisoara Romania Johannes Kepler Univ Linz RISC Linz Austria Tbilisi State Univ VIAM Tbilisi Georgia Int Black Sea Univ Tbilisi Georgia

ISBN: (纸本)9781450367530

ABAC(alpha) is a foundational model for attribute-based access control with a minimal set of capabilities to configure many access control models of interest, including the dominant traditional ones: discretionary (DAC), mandatory (MAC), and role-based (RBAC). A fundamental security problem in the design of ABAC is to ensure safety, that is, to guarantee that a certain subject can never gain certain permissions to access certain object(s). We propose a rule-based specification of ABAC(alpha) and of its configurations, and the semantic framework of rho Log to turn this specification into executable code for the operational model of ABAC(alpha). Next, we identify some important properties of the operational model which allow us to define a rule-based algorithm for the safety problem, and to execute it with rho Log. the outcome is a practical tool to check safety of ABAC(alpha) configurations. rho Log is a system for rule-based programming with strategies and built-in support for constraint logic programming (CLP). We argue that rho Log is an adequate framework for the specification and verification of safety of ABAC(alpha) configurations. In particular, the authorization policies of ABAC(alpha) can be interpreted properly by the CLP component of rho Log, and the operations of its functional specification can be described by five strategies defined by conditional rewrite rules.

关键词： attribute based access control (ABAC) rule-based programming safety

来源：评论

学校读者我要写书评

暂无评论

Towards Effective Verification of Multi-Model access control Properties 19

Towards Effective Verification of Multi-Model Access Control...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Berger, Bernhard J. Maeder, Christian Nguempnang, Rodrigue Wete Sohr, Karsten Rubio-Medrano, Carlos Univ Bremen Bremen Germany Arizona State Univ Tempe AZ USA

ISBN: (纸本)9781450367530

Many existing software systems like logistics systems or enterprise applications employ data security in a more or less ad hoc fashion. Our approach focuses on access control such as permission-based discretionary access control (DAC), variants of role-based access control (RBAC) with delegation, and attribute-based access control (ABAC). Typically, software systems implement hybrid access control making an effective security analysis and assessment rather difficult. We propose an analysis methodology to reconstruct access control using a novel modular access control model. Our modular approach allows us to flexibly model exactly those access properties that are relevant for a given system. As formalism we use the Object Constraint Language (OCL) with Ecore from the Eclipse Modeling Framework (EMF). We demonstrate the suitability of our access control model for three software systems: a port community system (PCS), a clinical information system (CIS), and an identity management system (IdMS). For the PCS and CIS we model concrete roles and policies. For the IdMS we evaluate our analysis methodology in-depth by reconstructing access control policies from byte code using the Soot analysis framework as well as model transformation techniques (QVTo). the resulting model helped us to identify design deficiencies. Violated OCL invariants such as for mutually exclusive roles or cardinality constraints revealed non-trivial security vulnerabilities.

关键词： access control Model Permissions RBAC ABAC Delegation OCL Reverse Engineering

来源：评论

学校读者我要写书评

暂无评论

Efficient and Extensible Policy Mining for Relationship-Based access control 19

Efficient and Extensible Policy Mining for Relationship-Base...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Bui, thang Stoller, Scott D. Le, Hieu SUNY Stony Brook Stony Brook NY 11794 USA

ISBN: (纸本)9781450367530

Relationship-based access control (ReBAC) is a flexible and expressive framework that allows policies to be expressed in terms of chains of relationship between entities as well as attributes of entities. ReBAC policy mining algorithms have a potential to significantly reduce the cost of migration from legacy access control systems to ReBAC, by partially automating the development of a ReBAC policy. Existing ReBAC policy mining algorithms support a policy language with a limited set of operators;this limits their applicability. this paper presents a ReBAC policy mining algorithm designed to be both (1) easily extensible (to support additional policy language features) and (2) scalable. the algorithm is based on Bui et al.'s evolutionary algorithm for ReBAC policy mining algorithm. First, we simplify their algorithm, in order to make it easier to extend and provide a methodology that extends it to handle new policy language features. However, extending the policy language increases the search space of candidate policies explored by the evolutionary algorithm, thus causes longer running time and/or worse results. To address the problem, we enhance the algorithm with a feature selection phase. the enhancement utilizes a neural network to identify useful features. We use the result of feature selection to reduce the evolutionary algorithm's search space. the new algorithm is easy to extend and, as shown by our experiments, is more efficient and produces better policies.

关键词： security policy mining attribute-based access control relationship-based access control feature selection

来源：评论

学校读者我要写书评

暂无评论

access control for Binary Integrity Protection using Ethereum 19

Access Control for Binary Integrity Protection using Ethereu...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Stengele, Oliver Baumeister, Andreas Birnstill, Pascal Hartenstein, Hannes Karlsruhe Inst Technol Inst Telemat Karlsruhe Germany Fraunhofer IOSB Karlsruhe Germany

ISBN: (纸本)9781450367530

the integrity of executable binaries is essential to the security of any device that runs them. At best, a manipulated binary can leave the system in question open to attack, and at worst, it can compromise the entire system by itself. In recent years, supply-chain attacks have demonstrated that binaries can even be compromised unbeknownst to their creators. this, in turn, leads to the dissemination of supposedly valid binaries that need to be revoked later. In this paper, we present and evaluate a concept for publishing and revoking integrity protecting information for binaries, based on the Ethereum Blockchain and its underlying peer-to-peer network. Smart Contracts are used to enforce access control over the publication and revocation of integrity preserving information, whereas the peer-to-peer network serves as a fast, global communication service to keep user clients informed. the Ethereum Blockchain serves as a tamper-evident, publicly-verifiable log of published and revoked binaries. Our implementation incurs costs comparable to registration fees for centralised software distribution platforms but allows publication and revocation of individual binaries within minutes. the proposed concept can be integrated incrementally into existing software distribution platforms, such as package repositories or various app stores.

关键词： Blockchain binary integrity protection revocation

来源：评论

学校读者我要写书评

暂无评论

PolTree: A Data Structure for Making Efficient access Decisions in ABAC 19

PolTree: A Data Structure for Making Efficient Access Decisi...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Nath, Ronit Das, Saptarshi Sural, Shamik Vaidya, Jaideep Atluri, Vijay IIT Kharagpur Kharagpur W Bengal India Rutgers State Univ New Brunswick NJ USA

ISBN: (纸本)9781450367530

In Attribute-Based access control (ABAC), a user is permitted or denied access to an object based on a set of rules (together called an ABAC Policy) specified in terms of the values of attributes of various types of entities, namely, user, object and environment. Efficient evaluation of these rules is therefore essential for ensuring decision making at on-line speed when an access request comes. Sequentially evaluating all the rules in a policy is inherently time consuming and does not scale with the size of the ABAC system or the frequency of access requests. this problem, which is quite pertinent for practical deployment of ABAC, surprisingly has not so far been addressed in the literature. In this paper, we introduce two variants of a tree data structure for representing ABAC policies, which we name as PolTree. In the binary version (B-PolTree), at each node, a decision is taken based on whether a particular attribute-value pair is satisfied or not. the n-ary version (N-PolTree), on the other hand, grows as many branches out of a given node as the total number of possible values for the attribute being checked at that node. An extensive experimental evaluation with diverse data sets shows the scalability and effectiveness of the proposed approach.

关键词： ABAC access Decision Attribute-Value Pair Policy Tree

来源：评论

学校读者我要写书评

暂无评论

Effectively Enforcing Authorization Constraints for Emerging Space-Sensitive technologies 19

Effectively Enforcing Authorization Constraints for Emerging...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Rubio-Medrano, Carlos E. Jogani, Shaishavkumar Leitner, Maria Zhao, Ziming Ahn, Gail-Joon Arizona State Univ Tempe AZ 85281 USA AIT Vienna Austria Rochester Inst Technol Henrietta NY USA Samsung Res Mountain View CA USA

ISBN: (纸本)9781450367530

Recently, applications that deliver customized content to end-users, e.g., digital objects on top of a video stream, depending on information such as their current physical location, usage patterns, personal data, etc., have become extremely popular. Despite their promising future, some concerns still exist with respect to the proper use of such space-sensitive applications (S-Apps) inside independently-run physical spaces, e.g., schools, museums, hospitals, memorials, etc. Based on the idea that innovative technologies should be paired with novel (and effective) security measures, this paper proposes space-sensitive access control (SSAC), an approach for restricting space-sensitive functionality in such independently-run physical spaces, allowing for the specification, evaluation and enforcement of rich and flexible authorization policies, which, besides meeting the specific needs for S-Apps, are also intended to avoid the need for interruptions in their normal use as well as repetitive policy updates, thus providing a convenient solution for both policy makers and end-users. We present a theoretical model, a proof-of-concept S-App, and a supporting API framework, which facilitate the policy crafting, storage, retrieval and evaluation processes, as well as the enforcement of authorization decisions. In addition, we present a performance case study depicting our proof-of-concept S-App in a set of realistic scenarios, as well as a user study which resulted in 90% of participants being able to understand and write authorization policies using our approach, and 93% of them also recognizing the need for restricting functionality in the context of emerging space-sensitive technologies, thus providing evidence that encourages the adoption of SSAC in practice.

关键词： Attributes Authorization Policies Space-Sensitive access control

来源：评论

学校读者我要写书评

暂无评论

IoT Passport: A Blockchain-Based Trust Framework for Collaborative Internet-of-things 19

IoT Passport: A Blockchain-Based Trust Framework for Collabo...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Tang, Bo Kang, Hongjuan Fan, Jingwen Li, Qi Sandhu, Ravi Sichuan Changhong Elect Co Ltd Informat Secur Lab Mianyang Sichuan Peoples R China Tsinghua Univ Inst Network Sci & Cyberspace Beijing Peoples R China Tsinghua Univ BNRist Beijing Peoples R China Univ Texas San Antonio Inst Cyber Secur San Antonio TX USA Univ Texas San Antonio Dept Comp Sci San Antonio TX USA

ISBN: (纸本)9781450367530

Internet-of-things (IoT) is a rapidly-growing transformative expansion of the Internet with increasing influence on our daily life. Since the number of "things" is expected to soon surpass human population, control and automation of IoT devices has received considerable attention from academia and industry. Cross-platform collaboration is highly desirable for better user experience due to fragmentation of user needs and vendor products with time. Centralized approaches have been used to build federated trust among platforms and devices, but limit diversity and scalability. We propose a decentralized trust framework, called IoT Passport, for cross-platform collaborations using blockchain technology. IoT Passport is motivated by the familiar use of passports for international travel but with greater dynamism. It enables platforms to establish arbitrary trust relations with each other containing specific rules for intended collaborations, enforced by a combination of smart contracts. Each interaction among devices is signed by the participants and recorded on the blockchain. the records are utilized as attributes for authorization and as proofs of incentive plans. this approach incorporates the preferences of participating platforms and end users, and opens new avenues for collaborative edge computing as well as research on blockchain-based access control mechanism for IoT environments.

关键词： Internet of things Blockchain Trust Framework access control

来源：评论

学校读者我要写书评

暂无评论

Securing Big Data: New access control Challenges and Approaches 19

Securing Big Data: New Access Control Challenges and Approac...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Kantarcioglu, Murat Univ Texas Dallas Richardson TX 75083 USA

ISBN: (纸本)9781450367530

Recent cyber attacks have shown that the leakage/stealing of big data may result in enormous monetary loss and damage to organizational reputation, and increased identity theft risks for individuals. Furthermore, in the age of big data, protecting the security and privacy of stored data is paramount for maintaining public trust, and getting the full value from the collected data. In this talk, we first discuss the unique security and privacy challenges arise due to big data and the NoSQL systems designed to analyze big data. Also we discuss our proposed SecureDL system that is built on top of existing NoSQL databases such as Hadoop and Spark and designed as a data access broker where each request submitted by a user app is automatically captured. these captured requests are logged, analyzed and then modified (if needed) to conform with security and privacy policies (e.g., [5]), and submitted to underlying NoSQL database. Furthermore, SecureDL can allow organizations to audit their big data usage to prevent data misuse and comply with various privacy regulations [2]. SecureDL is totally transparent from the user point of view and does not require any change to the user's code and/or the underlying NoSQL database systems. therefore, it can be deployed on existing NoSQL databases. Later on, we discuss how to add additional security layer for protecting big data using encryption techniques (e.g., [1, 3, 4]). Especially, we discuss our work on leveraging the modern hardware based trusted execution environments (TEEs) such as Intel SGX for secure encrypted data processing. We also discuss how to provide a simple, secure and high level language based framework that is suitable for enabling generic data analytics for non-security experts who do not have security concepts such as "oblivious execution". Our proposed framework allows data scientists to perform the data analytic tasks with TEEs using a Python/Matlab like high level language;and automatically compiles programs w

关键词： NoSQL databases access control security privacy intrusion detection encrypted data processing

来源：评论

学校读者我要写书评

暂无评论

Smart-AC: A New Framework Concept for Modeling access control Policy 16

Smart-AC: A New Framework Concept for Modeling Access Contro...

引用

16th International Conference on Mobile Systems and Pervasive Computing (MobiSPC) / 14th International Conference on Future Networks and Communications (FNC) / 9th International Conference on Sustainable Energy Information Technology

作者： Kashmar, Nadine Adda, Mehdi Atieh, Mirna Ibrahim, Hussein Univ Quebec Rimouski Dept Math Informat & Genie 300 Allee Ursulines Rimouski PQ Canada Lebanese Univ Fac Econ Sci & Adm Business Comp Dept Hadat Lebanon Inst Technol Maintenance Ind 175 Rue Verendrye Sept Iles PQ G4R 5B7 Canada

As new technologies grow such as Internet of things (IoT) and cloud computing, the way how people interact with devices change. the current world of interconnectivity, the heterogeneity of networks, platforms, applications, and the diversity of users make the modernization of security methods inevitable fact. access control (AC) is one of these essential security requirements in this domain. the continuous technology propagation forces the need to enhance AC methods, which are presented in the literature by combining features from two or more models based on a given case or scenario. the aim is to enforce AC policy and create secure communication environments. In this paper, we summarize some of the proposed methods with combined features from various AC models in the light of new technologies. Also, we present a deeper look for our idea of finding a methodology for a new dynamic Smart-AC model and a use case, in addition to the challenges to implement it. Our aim is to find a general AC framework to overcome the limitations of the presented AC methods, since they are not generic enough and do not encompass a general concept to tackle the various IT cases. the concept of our Smart-AC method is that it can be oriented to include (or exclude) all (or some) AC features for a given scenario or project, and work as a generic basis to encompass the heterogeneity of all AC models. Our proposed model aims to follow up AC requirements along with technology propagations and developments. (C) 2019 the Authors. Published by Elsevier B.V. this is an open access article under the CC BY-NC-ND license (http://***/licenses/by-nc-nd/4.0/) Peer-review under responsibility of the Conference Program Chairs.

关键词： Acess control models Smart Policy IoT Cloud computing Industry 4.0

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共47页 << < 8 9 10 11 12 13 14 15 16 17 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：