检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

442 篇 会议
20 篇 期刊文献

馆藏范围

462 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

379 篇 工学
- 354 篇 计算机科学与技术...
- 157 篇 软件工程
- 82 篇 控制科学与工程
- 34 篇 信息与通信工程
- 23 篇 电气工程
- 9 篇 安全科学与工程
- 5 篇 机械工程
- 5 篇 仪器科学与技术
- 5 篇 电子科学与技术（可...
- 5 篇 交通运输工程
- 3 篇 力学（可授工学、理...
- 3 篇 材料科学与工程（可...
- 3 篇 动力工程及工程热...
- 3 篇 网络空间安全
- 2 篇 光学工程
- 2 篇 冶金工程
- 2 篇 建筑学
44 篇 管理学
- 28 篇 图书情报与档案管...
- 21 篇 管理科学与工程(可...
- 8 篇 工商管理
25 篇 理学
- 20 篇 数学
- 4 篇 统计学（可授理学、...
- 2 篇 物理学
- 2 篇 生物学
- 2 篇 系统科学
15 篇 法学
- 12 篇 社会学
- 3 篇 法学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
1 篇 教育学
1 篇 农学

主题

150 篇 access control
23 篇 security
17 篇 rbac
16 篇 authorization
13 篇 privacy
11 篇 internet of thin...
11 篇 analytical model...
9 篇 role-based acces...
9 篇 relationship-bas...
9 篇 attribute-based ...
8 篇 xacml
8 篇 control system a...
8 篇 usage control
7 篇 media access pro...
6 篇 throughput
6 篇 quality of servi...
6 篇 wireless lan
5 篇 abac
5 篇 policy mining
5 篇 xml

机构

7 篇 purdue univ w la...
6 篇 carnegie mellon ...
6 篇 purdue univ dept...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 suny stony brook...
3 篇 univ kent sch co...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
2 篇 univ waterloo wa...
2 篇 univ trento dept...
2 篇 univ genoa dipar...
2 篇 ecole polytech f...
2 篇 univ. of texas d...
2 篇 department of co...
2 篇 university of so...
2 篇 colorado state u...

作者

19 篇 bertino elisa
10 篇 lobo jorge
9 篇 li ninghui
9 篇 crampton jason
9 篇 sandhu ravi
9 篇 ahn gail-joon
7 篇 ray indrakshi
7 篇 stoller scott d.
6 篇 zannone nicola
6 篇 tripunitara mahe...
6 篇 thuraisingham bh...
6 篇 carminati barbar...
6 篇 xu dianxiang
6 篇 iyer padmavathi
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 vaidya jaideep
5 篇 molloy ian
5 篇 beznosov konstan...
5 篇 ferrara anna lis...

语言

448 篇 英文
9 篇 其他
4 篇 中文
1 篇 葡萄牙文

检索条件"任意字段=14th ACM Symposium on Access Control Models and Technologies"

共 462 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

SacmAT 2020 - Proceedings of the 25th acm symposium on access control models and technologies

SACMAT 2020 - Proceedings of the 25th ACM Symposium on Acces...

引用

25th acm symposium on access control models and technologies, SacmAT 2020

ISBN: (纸本)9781450375689

the proceedings contain 24 papers. the topics discussed include: metering graphical data leakage with snowman;visualizing and interpreting RNN models in URL-based phishing detection;parallel space traveling: a security analysis of app-level virtualization in android;norm-based access control;security and privacy analysis of android family locator apps;declarative access control for aggregations of multiple ownership data;accept - maybe - decline: introducing partial consent for the permission-based access control model of android;and matrix decomposition: analysis of an access control approach on transaction-based dags without finality.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Hierarchical Key Assignment Schemes with Key Rotation 29

Hierarchical Key Assignment Schemes with Key Rotation

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Belfiore, Roberta Cimorelli De Santis, Alfredo Ferrara, Anna Lisa Masucci, Barbara Univ Molise Dept Biosci Div Comp Sci Campobasso Italy Univ Salerno Dept Comp Sci Fisciano Italy

ISBN: (纸本)9798400704918

Hierarchical structures are frequently used to manage access to sensitive data in various contexts, ranging from organizational settings to IoT networks. A Hierarchical Key Assignment Scheme (HKAS) is designed to cryptographically enforce access control in hierarchical structures. It operates by assigning secrets and encryption keys to a set of classes within a partially ordered hierarchy. this approach ensures that the secret of a higher-level class can be used to efficiently derive keys for all classes positioned at a lower level in the hierarchy. In this paper, we introduce a novel cryptographic primitive that we name HKAS with Key Rotation (KR-HKAS). this extension enhances the current HKAS framework by enabling a provably secure mechanism for periodically rotating both encryption keys and secrets, without necessitating a complete setup reset. this proactive approach effectively mitigates the risk of security breaches due to compromised cryptographic material, aligning with the best security practice.

关键词： access control Hierarchical Key Assignment Provable Security

来源：评论

学校读者我要写书评

暂无评论

Poster: How to Raise a Robot - Beyond access control Constraints in Assistive Humanoid Robots 23

Poster: How to Raise a Robot - Beyond Access Control Constra...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Hemken, Niklas Jacob, Florian Peller-Konrad, Fabian Kartmann, Rainer Asfour, Tamim Hartenstein, Hannes KIT Karlsruhe Germany

ISBN: (纸本)9798400701733

Humanoid robots will be able to assist humans in their daily life, in particular due to their versatile action capabilities. However, while these robots need a certain degree of autonomy to learn and explore, they also should respect various constraints, for access control and beyond. We explore incorporating privacy and security constraints (Activity-Centric access control and Deep Learning Based access control) with robot task planning approaches (classical symbolic planning and end-to-end learning-based planning). We report preliminary results on their respective trade-offs and conclude that a hybrid approach will most likely be the method of choice.

关键词： Humanoid Robots Robot Task Planning Activity-Centric access control Deep Learning based access control

来源：评论

学校读者我要写书评

暂无评论

Obligation Management Framework for Usage control 29

Obligation Management Framework for Usage Control

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Joumaa, Hussein Hariri, Ali Petrovska, Ana Osliak, Oleksii Dimitrakos, theo Crispo, Bruno Univ Trento Dept Informat Engn & Comp Sci Trento Italy Huawei Technol Duesseldorf GmbH Munich Germany Univ Kent Sch Comp Canterbury Kent England

ISBN: (纸本)9798400704918

Obligations were introduced in access and usage control as a mechanism to specify mandatory actions to be fulfilled as part of authorization. In this paper, we address challenges related to obligation management in access and usage control, focusing on the Abbreviated Language For Authorization (ALFA) and eXtensible access control Markup Language (XacmL) standards. Firstly, we provide a comprehensive analysis of Combining Algorithms (CAs) to determine their influence on the selection and ordering of obligations and identify nondeterminism. We then propose solutions to eliminate such nondeterminism enabling policy authors to explicitly specify the intended behavior. Secondly, we discuss the recurrence of obligations in usage control that occurs due to policy re-evaluations, highlighting the need to execute some obligations only once. We address this problem by introducing a parameter that enables policy authors to explicitly specify whether they intend an obligation to recur or not. thirdly, we highlight an ambiguity in obligation applicability to lifecycle phases (e.g., ongoing) in usage control, arising from the lack of explicit associations between obligations and phases in particular cases. To address this issue, we introduce a parameter that explicitly specifies the scope of an obligation, allowing policy authors to restrict obligations to a single phase or apply them to the entire authorization. Finally, we extend the functionality of the Obligation Manager (OM) component to combine all three solutions, providing deterministic obligation management.

关键词： Obligations Obligation Management Usage control access control ALFA XacmL

来源：评论

学校读者我要写书评

暂无评论

Towards Automated Learning of access control Policies Enforced by Web Applications 23

Towards Automated Learning of Access Control Policies Enforc...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Iyer, Padmavathi Masoumzadeh, Amir SUNY Albany Albany NY 12222 USA

ISBN: (纸本)9798400701733

Obtaining an accurate specification of the access control policy enforced by an application is essential in ensuring that it meets our security/privacy expectations. this is especially important as many of real-world applications handle a large amount and variety of data objects that may have different applicable policies. We investigate the problem of automated learning of access control policies from web applications. the existing research on mining access control policies has mainly focused on developing algorithms for inferring correct and concise policies from low-level authorization information. However, little has been done in terms of systematically gathering the low-level authorization data and applications' data models that are prerequisite to such a mining process. In this paper, we propose a novel black-box approach to inferring those prerequisites and discuss our initial observations on employing such a framework in learning policies from real-world web applications.

关键词： policy mining web application relationship-based access control automated concrete systems

来源：评论

学校读者我要写书评

暂无评论

SecureCheck: User-Centric and Geolocation-Aware access Mediation Contracts for Sharing Private Data 29

SecureCheck: User-Centric and Geolocation-Aware Access Media...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Hopkins, Jacob Rubio-Medrano, Carlos Texas A&M Univ Corpus Christi Corpus Christi TX USA

ISBN: (纸本)9798400704918

Data oversharing is a critical issue in today's technologically driven society. Numerous entities, i.e., corporations, governments, criminal groups, are collecting individuals' data. One potential cause is that current systems, such as verification systems, do not prioritize the minimization of exchanged data. To address this issue, we propose SecureCheck, a novel privacy-enhancing technology (PET) framework that prioritizes data minimization. We aim to ensure that individuals control technology and its access to themselves, and not technology controlling individuals or their data. To that end, our proposed framework is comprised of two components: a novel access control model, called access mediation contracts, that enables users to negotiate with third parties over what data is used in a verification event, and a novel recommendation system that recommends the access mediation contracts in situationally-aware manner using geolocation data. As a part of ongoing work, we are developing a privacy calculus model detailing the decision process for data exchange. Also, we are conducting an exploratory study to better identify how to resolve conflicts between data owners and verifiers. Finally, we are actively working towards VaxCheck, a prototype implementation of SecureCheck focused on vaccine verification systems, so we can assess its effectiveness and suitability for future deployments in practice.

关键词： Privacy Data Sharing Verification Privacy Enhancing Technology access Mediation Geolocation-based Recommendation

来源：评论

学校读者我要写书评

暂无评论

Poster: Integrating Spatio-temporal Authorization With Generic Cloud-based Software Architecture for Internet Of things Devices 23

Poster: Integrating Spatio-temporal Authorization With Gener...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Moncivais, Marshal Al Lail, Mustafa Texas A&M Int Univ Laredo TX 78041 USA

ISBN: (纸本)9798400701733

the significant rise in the usage of IoT devices and their security issues has created a demand for improved security for these systems. Unfortunately, no standard IoT architecture exists, making the development of security solutions for IoT systems difficult. Towards this end, we leverage an IoT framework to create a generic IoT software architecture and integrate it with an extension of the RBAC model incorporating the time and location of users to determine access to different IoT resources. We provide a prototype implementation of the integrated architecture to show its feasibility.

关键词： access control software architecture Internet of things

来源：评论

学校读者我要写书评

暂无评论

Security Analysis of access control Policies for Smart Homes 23

Security Analysis of Access Control Policies for Smart Homes

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Belfiore, Roberta Cimorelli Ferrara, Anna Lisa Univ Molise Campobasso Italy

ISBN: (纸本)9798400701733

Ensuring security is crucial in smart home settings, where only authorized users should have access to home devices. Over the past decade, researchers have focused on developing access control policies and evaluating their efficacy in preventing unauthorized access. A new variant of Role-Based access control (RBAC), called Extended Generalized Role-Based access control (EGRBAC), has recently been introduced to capture the intricate user-device-context interactions that are prevalent in smart home environments. In this paper, we demonstrate that the task of analyzing administrative EGRBAC policies for security can be performed by reducing it to the security analysis of administrative RBAC policies. We also conducted a case study on a realistic smart home to prove the viability of our approach with respect to security requirements such as availability and privilege escalation.

关键词： access control smart homes automated security analysis

来源：评论

学校读者我要写书评

暂无评论

Prompting LLM to Enforce and Validate CIS Critical Security control 29

Prompting LLM to Enforce and Validate CIS Critical Security ...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Ahmed, Mohiuddin Wei, Jinpeng Al-Shaer, Ehab Univ North Carolina Charlotte Software & Informat Syst Charlotte NC 28223 USA Carnegie Mellon Univ Sch Comp Sci Pittsburgh PA 15213 USA

ISBN: (纸本)9798400704918

Proper security control enforcement reduces the attack surface and protects the organizations against attacks. Organizations like NIST and CIS (Center for Internet Security) provide critical security controls (CSCs) as a guideline to enforce cyber security. Automated enforcement and measurability mechanisms for these CSCs still need to be developed. Analyzing the implementations of security products to validate security control enforcement is non-trivial. Moreover, manually analyzing and developing measures and metrics to monitor, and implementing those monitoring mechanisms are resource-intensive tasks and massively dependent on the security analyst's expertise and knowledge. To tackle those problems, we use large language models (LLMs) as a knowledge base and reasoner to extract measures, metrics, and monitoring mechanism implementation steps from security control descriptions to reduce the dependency on security analysts. Our approach used few-shot learning with chain-of-thought (CoT) prompting to generate measures and metrics and generated knowledge prompting for metrics implementation. Our evaluation shows that prompt engineering to extract measures, metrics, and monitoring implementation mechanisms can reduce dependency on humans and semi-automate the extraction process. We also demonstrate metric implementation steps using generated knowledge prompting with LLMs.

关键词： Critical Security control LLM Prompt Engineering Account Management

来源：评论

学校读者我要写书评

暂无评论

Pairing Human and Artificial Intelligence: Enforcing access control Policies with LLMs and Formal Specifications 29

Pairing Human and Artificial Intelligence: Enforcing Access ...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Rubio-Medrano, Carlos E. Kotak, Akash Wang, Wenlu Sohr, Karsten Texas A&M Univ Corpus Christi Corpus Christi TX USA Univ Bremen Bremen Germany

ISBN: (纸本)9798400704918

Large Language models (LLMs), such as ChatGPT and Google Bard, have performed interestingly well when assisting developers on computer programming tasks, a.k.a., coding, thus potentially resulting in convenient and faster software constructions. this new approach significantly enhances efficiency but also presents challenges in unsupervised code construction with limited security guarantees. LLMs excel in producing code with accurate grammar, yet they are not specifically trained to guarantee the security of the code. In this paper, we provide an initial exploration into using formal software specifications as a starting point for software construction, allowing developers to translate descriptions of security-related behavior into natural language instructions for LLMs, a.k.a., prompts. In addition, we leveraged automated verification tools to evaluate the code produced against the aforementioned specifications, following a modular, step-by-step software construction process. For our study, we leveraged Role-based access control (RBAC), a mature security model, and the Java Modeling Language ( JML), a behavioral specification language for Java. We test our approach on different publicly-available LLMs, namely, OpenAI ChatGPT 4.0, Google Bard, and Microsoft CoPilot. We provide a description of two applications-a security-sensitive Banking application employing RBAC and an RBAC API module itself-, the corresponding JML specifications, as well as a description of the prompts, the generated code, the verification results, as well as a series of interesting insights for practitioners interested in further exploring the use of LLMs for securely constructing applications.

关键词： Large Language models ChatGPT Prompt Engineering Formal Specifications Software Construction. Java Modeling Language

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共47页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：