检索结果-内蒙古大学图书馆

14th IEEE Real-Time and Embedded Technology and Applications symposium

作者： Cucinotta, Tommaso Scuola Superiore Sant'Anna

ISBN: (纸本)9780769531465

this paper tackles the problem of defining an appropriate access control model for multi-user systems providing adaptive resource reservations to unprivileged users. Security requirements that need to be met by the system are identified, and an access control model satisfying them is proposed that also does not degrade the flexibility available on such systems due to the adaptive reservations framework. Also, the implementation of the proposed model within the AQuoSA architecture for Linux is briefly discussed.

关键词： access control models

来源：评论

学校读者我要写书评

暂无评论

A General Obligation Model and Continuity-Enhanced Policy Enforcement Engine for Usage control 08

A General Obligation Model and Continuity-Enhanced Policy En...

引用

13th acm symposium on access control models and technologies

作者： Katt, Basel Hafner, Michael Zhang, Xinwen Breu, Ruth Seifert, Jean-Pierre Univ Innsbruck A-6020 Innsbruck Austria

ISBN: (纸本)9781605581293

the usage control model (UCON) has been proposed to augment traditional access control models by integrating authorizations, obligations, and conditions and providing the properties of decision continuity and attribute mutability. Several recent work have applied UCON to support security requirements in different computing environments such as resource sharing in collaborative computing systems and data control in remote platforms. In this paper we identify two individual but interrelated problems of the original UCON model and recent implementations: oversimplifying the concept of usage session of the model, and the lack of comprehensive ongoing enforcement mechanism of implementations. We extend the core UCON model with continuous usage sessions thus extensively augment the expressiveness of obligations in UCON, and their propose a general, continuity-enhanced and configurable usage control enforcement engine. Finally we explain how our approach call satisfy flexible security requirements with an implemented prototype for a healthcare information system.

关键词： Design Security

来源：评论

学校读者我要写书评

暂无评论

Enforcing Security Properties in Task-based Systems 08

Enforcing Security Properties in Task-based Systems

引用

13th acm symposium on access control models and technologies

作者： Irwin, Keith Yu, Ting Winsborough, William H. N Carolina State Univ Raleigh NC 27695 USA

ISBN: (纸本)9781605581293

though a user's privileges are often granted based on the tasks that the user is expected to fulfill, the concept of tasks is usually not explicitly modeled in access control. We propose a system where tasks are the central concept that associates users to privileges. Ideally a user should be able to utilize these privileges and fulfill his tasks, but not to take harmful actions. To ensure this, a system often specifies a high-level security property to restrict the sequence of actions that a user can perform. In this paper, we propose a general model of access control in task-based system. this model considers the permissions a user as well as their temporal availability. Based on this model, we investigate the problem of enforcing security properties both statically (i.e., when tasks are assigned) and dynamically (i.e., when actions are performed). We study the complexity of static enforcement, and design efficient dynamic enforcement algorithms that avoiding unnecessary history tracking.

关键词： Policy Task-based access control Security Properties

来源：评论

学校读者我要写书评

暂无评论

Task-Based Entailment Constraints for Basic Workflow Patterns 08

Task-Based Entailment Constraints for Basic Workflow Pattern...

引用

13th acm symposium on access control models and technologies

作者： Wolter, Christian Schaad, Andreas Meinel, Christoph SAP Res D-76131 Karlsruhe Germany

ISBN: (纸本)9781605581293

access control decisions are based on the authorisation policies defined for a system as well as observed context and behaviour when evaluating these constraints at runtime. Workflow management systems have been recognised as a primary source for defining authorisation policies at workflow designtime, as well as generating context;at runtime. this paper analyses recent work in tire workflow community regarding established control-flow patterns. We claim that there is air intrinsic relationship between these patterns and a set of task-based entailment constraints - such as Separation of Duty - that have been recently identified by the access control community. these constraints are based on a pre-determined partial order on sequence and parallel execution patterns. When, however, such air order does riot exist, because of more complex control-flow patterns, ambiguous constraint evaluation situations will arise at workflow runtime. Accordingly, this paper reviews basic workflow patterns and identifies relationships between these and task-based entailment constraints. In addition, art analysis of possible runtime ambiguities that may arise from these relationships is presented. Our approach is based on recently developed techniques for visual constraint representation at a workflow design-time.

关键词： access control Separation of Duty Task-Based Entailment Constraints Workflow Management Workflow Modelling

来源：评论

学校读者我要写书评

暂无评论

Fast Exact and Heuristic Methods for Role Minimization Problems 08

Fast Exact and Heuristic Methods for Role Minimization Probl...

引用

13th acm symposium on access control models and technologies

作者： Ene, Alina Rao, Prasad Horne, William Schreiber, Robert Milosavljevic, Nikola Tarjan, Robert E. Princeton Univ Dept Comp Sci Princeton NJ 08540 USA

ISBN: (纸本)9781605581293

We describe several new bottom-up approaches to problems in role engineering for Role-Based access control (RBAC). the salient problems are all NP-complete, even to approximate, yet we find that in instances that arise in practice these problems can be solved in minutes. We first consider role minimization, the process of finding a smallest collection of roles that can be used to implement a pre-existing user-to-permission relation. We introduce fast graph reductions that allow recovery of the solution from the solution to a problem on a smaller input graph. For Our test cases, these reductions either solve the problem, or reduce the problem enough that we find the optimum solution with a (worst-case) exponential method. We introduce lower bounds that are sharp for seven of nine test cases and are within 3.4% oil the other two. We introduce and test a new polynormial-time approximation that on average yields 2% more roles than the optimum. We next consider the related problem of minimizing the number of connections between roles and users or permissions, and we develop effective heuristic methods for this problem as well. Finally, we propose methods for several related problems.

关键词： Role mining role-based access control

来源：评论

学校读者我要写书评

暂无评论

New constructions for provably-secure time-bound hierarchical key assignment schemes 07

New constructions for provably-secure time-bound hierarchica...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： De Santis, Alfredo Ferrara, Anna Lisa Masucci, Barbara Univ Salerno Dipartimento Informat & Applicaz I-84084 Fisciano SA Italy

ISBN: (纸本)9781595937452

A time-bound hierarchical key assignment scheme is a method to assign time-dependent encryption keys to a set of classes in a partially ordered hierarchy, in such a way that each class in the hierarchy can compute the keys of all classes lower down in the hierarchy, according to temporal constraints. In this paper we propose new constructions for time-bound hierarchical key assignment schemes which are provably secure with respect to key indistinguishability. Our constructions use as a building block any provably-secure hierarchical key assignment scheme without temporal constraints and exhibit a tradeoff among the amount of private information held by each class, the amount of public data, the complexity of key derivation, and the computational assumption on which their security is based. Moreover, the proposed schemes support updates to the access hierarchy with local changes to public information and without requiring any private information to be re-distributed. (C) 2008 Elsevier B.V. All rights reserved.

关键词： access control Key assignment Provable security Efficient key derivation

来源：评论

学校读者我要写书评

暂无评论

New constructions for provably-secure time-bound hierarchical key assignment schemes

引用

thEORETICAL COMPUTER SCIENCE 2008年第1-3期407卷 213-230页

作者： De Santis, Alfredo Ferrara, Anna Lisa Masucci, Barbara Univ Salerno Dipartimento Informat & Applicaz I-84084 Fisciano SA Italy

关键词： access control Key assignment Provable security Efficient key derivation

来源：评论

学校读者我要写书评

暂无评论

RCWLBAC - representing role based access control in OWL

RCWLBAC - representing role based access control in OWL

引用

13th acm symposium on access control models and technologies, SacmAT'08

作者： Finin, T. Joshi, A. Kagal, L. Niu, J. Sandhu, R. Winsborough, W. thuraisingham, B. Univ. of Maryland Baltimore United States Massachusetts Institute of Technology Univ. of Texas San Antonio United States Univ. of Texas Dallas

ISBN: (纸本)9781605581293

there have been two parallel themes in access control re-search in recent years. On the one hand there are efforts to develop new access control models to meet the policy needs of real world application domains. In parallel, and almost separately, researchers have developed policy languages for access control. this paper is motivated by the consideration that these two parallel efforts need to develop synergy. A policy language in the abstract without ties to a model gives the designer little guidance. Conversely a model may not have the machinery to express all the policy details of a given system or may deliberately leave important aspects unspecified. Our vision for the future is a world where advanced access control concepts are embodied in models that are supported by policy languages in a natural intuitive manner, while allowing for details beyond the models to be further specified in the policy language. this paper studies the relationship between the Web Ontology Language (OWL) and the Role Based access control (RBAC) model. Although OWL is a web ontology language and not specifically designed for expressing authorization policies, it has been used successfully for this purpose in previous work. OWL is a leading specification language for the Semantic Web, making it a natural vehicle for providing access control in that context. In this paper we show two different ways to support the NIST Standard RBAC model in OWL and then discuss how the OWL constructions can be extended to model attribute-based RBAC or more generally attribute-based access control. We further examine and assess OWL's suitability for two other access control problems: supporting attribute based access control and performing security analysis in a trust-management framework. Copyright 2008 acm.

关键词： Ontology

来源：评论

学校读者我要写书评

暂无评论

SacmAT'07: Proceedings of the 12th acm symposium on access control models and technologies

SACMAT'07: Proceedings of the 12th ACM Symposium on Access C...

引用

SacmAT'07: 12th acm symposium on access control models and technologies

ISBN: (纸本)1595937455

the proceedings contain 28 papers. the topics discussed include: An approach to evaluate policy similarity;a posteriori compliance control;enforcing access control over data streams;fine-grained access control to web databases;privacy-aware role based access control;a privacy preserving assertion based policy language for federation systems;distributed access control: a privacy-conscious approach;towards a VMM-based usage control framework for OS kernel integrity protection;managing the risk of covert information flows in virtual machine systems;a logical specification and analysis for SELinux MLS policy;Mesh: secure, lightweight grid middleware using existing SSH infrastructure;multilevel filesystems in solaris trusted extensions;a formal approach for testing security rules;new constructions for provably-secure time-bound hierarchical key assignment schemes;and role engineering using graph optimization.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

ROWLBAC: representing role based access control in OWL 08

ROWLBAC: representing role based access control in OWL

引用

Proceedings of the 13th acm symposium on access control models and technologies

作者： T. Finin A. Joshi L. Kagal J. Niu R. Sandhu W. Winsborough B. thuraisingham Univ. of Maryland Massachusetts Institute of Technology Univ. of Texas at San Antonio Univ. of Texas Dallas

ISBN: (纸本)9781605581293

there have been two parallel themes in access control research in recent years. On the one hand there are efforts to develop new access control models to meet the policy needs of real world application domains. In parallel, and almost separately, researchers have developed policy languages for access control. this paper is motivated by the consideration that these two parallel efforts need to develop synergy. A policy language in the abstract without ties to a model gives the designer little guidance. Conversely a model may not have the machinery to express all the policy details of a given system or may deliberately leave important aspects unspecified. Our vision for the future is a world where advanced access control concepts are embodied in models that are supported by policy languages in a natural intuitive manner, while allowing for details beyond the models to be further specified in the policy *** paper studies the relationship between the Web Ontology Language (OWL) and the Role Based access control (RBAC) model. Although OWL is a web ontology language and not specifically designed for expressing authorization policies, it has been used successfully for this purpose in previous work. OWL is a leading specification language for the Semantic Web, making it a natural vehicle for providing access control in that context. In this paper we show two different ways to support the NIST Standard RBAC model in OWL and then discuss how the OWL constructions can be extended to model attribute-based RBAC or more generally attribute-based access control. We further examine and assess OWL's suitability for two other access control problems: supporting attribute based access control and performing security analysis in a trust-management framework.

关键词： semantic web ontology OWL access control model RBAC

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：