检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

442 篇 会议
20 篇 期刊文献

馆藏范围

462 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

379 篇 工学
- 354 篇 计算机科学与技术...
- 157 篇 软件工程
- 82 篇 控制科学与工程
- 34 篇 信息与通信工程
- 23 篇 电气工程
- 9 篇 安全科学与工程
- 5 篇 机械工程
- 5 篇 仪器科学与技术
- 5 篇 电子科学与技术（可...
- 5 篇 交通运输工程
- 3 篇 力学（可授工学、理...
- 3 篇 材料科学与工程（可...
- 3 篇 动力工程及工程热...
- 3 篇 网络空间安全
- 2 篇 光学工程
- 2 篇 冶金工程
- 2 篇 建筑学
44 篇 管理学
- 28 篇 图书情报与档案管...
- 21 篇 管理科学与工程(可...
- 8 篇 工商管理
25 篇 理学
- 20 篇 数学
- 4 篇 统计学（可授理学、...
- 2 篇 物理学
- 2 篇 生物学
- 2 篇 系统科学
15 篇 法学
- 12 篇 社会学
- 3 篇 法学
4 篇 经济学
- 4 篇 应用经济学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
1 篇 教育学
1 篇 农学

主题

150 篇 access control
23 篇 security
17 篇 rbac
16 篇 authorization
13 篇 privacy
11 篇 internet of thin...
11 篇 analytical model...
9 篇 role-based acces...
9 篇 relationship-bas...
9 篇 attribute-based ...
8 篇 xacml
8 篇 control system a...
8 篇 usage control
7 篇 media access pro...
6 篇 throughput
6 篇 quality of servi...
6 篇 wireless lan
5 篇 abac
5 篇 policy mining
5 篇 xml

机构

7 篇 purdue univ w la...
6 篇 carnegie mellon ...
6 篇 purdue univ dept...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 suny stony brook...
3 篇 univ kent sch co...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
2 篇 univ waterloo wa...
2 篇 univ trento dept...
2 篇 univ genoa dipar...
2 篇 ecole polytech f...
2 篇 univ. of texas d...
2 篇 department of co...
2 篇 university of so...
2 篇 colorado state u...

作者

19 篇 bertino elisa
10 篇 lobo jorge
9 篇 li ninghui
9 篇 crampton jason
9 篇 sandhu ravi
9 篇 ahn gail-joon
7 篇 ray indrakshi
7 篇 stoller scott d.
6 篇 zannone nicola
6 篇 tripunitara mahe...
6 篇 thuraisingham bh...
6 篇 carminati barbar...
6 篇 xu dianxiang
6 篇 iyer padmavathi
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 vaidya jaideep
5 篇 molloy ian
5 篇 beznosov konstan...
5 篇 ferrara anna lis...

语言

448 篇 英文
9 篇 其他
4 篇 中文
1 篇 葡萄牙文

检索条件"任意字段=14th ACM Symposium on Access Control Models and Technologies"

共 462 条记录，以下是31-40 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

MSNetViews: Geographically Distributed Management of Enterprise Network Security Policy 23

MSNetViews: Geographically Distributed Management of Enterpr...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Anjum, Iffat Sokal, Jessica Rehman, Hafiza Ramzah Weintraub, Ben Leba, Ethan Enck, William Nita-Rotaru, Cristina Reaves, Bradley NC State Univ Raleigh NC 27695 USA Northeastern Univ Boston MA 02115 USA

ISBN: (纸本)9798400701733

Commercially-available software defined networking (SDN) technologies will play an important role in protecting the on-premises resources that remain as enterprises transition to zero trust architectures. However, existing solutions assume the entire network resides in a single geographic location, requiring organizations with multiple sites to manually ensure consistency of security policy across all sites. In this paper, we present MSNetViews, which extends a single, globally-defined and managed, enterprise network security policy to many geographically distributed sites. Each site operates independently and enforces a site-specific policy slice that is dynamically parameterized with user location as employees roam between sites. We build a prototype of MSNetViews and show that for an enterprise with globally distributed sites, the average time for policy state to settle after a user roams to a new site is well below two seconds. As such, we demonstrate that multisite organizations can efficiently protect their on-premises network-attached devices via a single global perspective.

关键词： enterprise network zero trust sdn access-control least-privilege

来源：评论

学校读者我要写书评

暂无评论

ProgramAlly: Creating Custom Visual access Programs via Multi-Modal End-User Programming 24

ProgramAlly: Creating Custom Visual Access Programs via Mult...

引用

37th acm Annual symposium on User Interface Software and Technology (UIST)

作者： Herskovitz, Jaylin Xu, Andi Alharbi, Rahaf Guo, Anhong Univ Michigan Ann Arbor MI 48109 USA

ISBN: (纸本)9798400706288

Existing visual assistive technologies are built for simple and common use cases, and have few avenues for blind people to customize their functionalities. Drawing from prior work on DIY assistive technology, this paper investigates end-user programming as a means for users to create and customize visual access programs to meet their unique needs. We introduce ProgramAlly, a system for creating custom filters for visual information, e.g., 'find NUMBER on BUS', leveraging three end-user programming approaches: block programming, natural language, and programming by example. To implement ProgramAlly, we designed a representation of visual filtering tasks based on scenarios encountered by blind people, and integrated a set of on-device and cloud models for generating and running these programs. In user studies with 12 blind adults, we found that participants preferred different programming modalities depending on the task, and envisioned using visual access programs to address unique accessibility challenges that are otherwise difficult with existing applications. through ProgramAlly, we present an exploration of how blind end-users can create visual access programs to customize and control their experiences.

关键词： accessibility Assistive technology Do-it-yourself End-user programming Blind Visual impairment Design

来源：评论

学校读者我要写书评

暂无评论

SEAL: Capability-Based access control for Data-Analytic Scenarios 23

SEAL: Capability-Based Access Control for Data-Analytic Scen...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Rasifard, Hamed Gopinath, Rahul Backes, Michael Nemati, Hamed CISPA Helmholtz Ctr Informat Secur Saarbrucken Germany Univ Sydney Sydney NSW Australia Stanford Univ Stanford CA 94305 USA

ISBN: (纸本)9798400701733

Data science is the basis for various disciplines in the Big-Data era. Due to the high volume, velocity, and variety of big data, data owners often store their data in data servers. Past few years, many computation techniques have emerged to protect the security and privacy of such shared data while enabling analysis thereon. Hence, access-control systems must provide a fine-grained, multi-layer mechanism to protect data. However, the existing systems and frameworks fail to satisfy all these requirements and resolve the trust issue between data owners and analysts. In this paper, we propose SEAL as a framework to protect the security and privacy of shared data. SEAL enables computations on shared data while they remain under the complete control of data owners through pre-defined policies. Our framework employs the capability-object model to define flexible access policies. SEAL's access-control system supports delegating and revoking access privileges and other access-control customizations. In addition, SEAL can assign security labels to privacy-sensitive data and track them to enable data owners to define where and when a data analyst can access their data. We demonstrate the practicability of our approach by presenting a prototype implementation of SEAL. Furthermore, we display the flexibility of our framework by implementing multiple data-analytic scenarios, which cover different applications.

关键词： capability-based access control secure data-sharing framework

来源：评论

学校读者我要写书评

暂无评论

Expressive Authorization Policies using Computation Principals 23

Expressive Authorization Policies using Computation Principa...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Gollamudi, Anitha Chong, Stephen Univ Massachusetts Lowell Lowell MA 01854 USA Harvard Univ Cambridge MA 02138 USA

ISBN: (纸本)9798400701733

In authorization logics, it is natural to treat computations as principals, since systems need to decide how much authority to give computations when they execute. But unlike other kinds of principals, the authority that we want to give to computations might be based on properties of the computation itself, such as whether the computation is differentially private, or whether the computation is memory safe. Existing authorization logics do not treat computation principals specially. Instead, they identify computation principals using a brittle hash-based naming scheme: minor changes to the code produce a distinct principal, even if the new computation is equivalent to the original one. Moreover, existing authorization logics typically treat computation principals as "black boxes," leaving any reasoning about the structure, semantics, or other properties of the computation out of the logic. We introduce Coal, a novel programming-language calculus that embeds an authorization logic in its type system via the Curry-Howard isomorphism. A key innovation of Coal is computation principals: computations that can be treated like other principals but also allow reasoning about the computation itself. Critically, Coal allows equivalent computations to be treated as equivalent principals, avoiding the brittleness of identity-based approaches to computation principals. Coal enables us to cleanly express fine-grained access control policies that are dependent on the structure and semantics of computations, such as expressing trust in all computations that are analyzed to be differentially private by any program analyzer that has been verified correct.

关键词： Authorization logics access control and authorization language-based security

来源：评论

学校读者我要写书评

暂无评论

Insights On Industrial Firewall and Its Application in Networked control Systems 24

Insights On Industrial Firewall and Its Application in Netwo...

引用

14th International Conference on Communication and Network Security, ICCNS 2024

作者： Wan, Ming Shi, Taofeng Wang, Xinjun Li, Dong Zhao, Yihao School of Cyber Science and Engineering Liaoning University Liaoning Shenyang China School of Information Liaoning University Liaoning Shenyang China

ISBN: (纸本)9798400717994

Current networked control systems are facing more and more severe challenges of cyber threats, and various intrinsic network-related vulnerabilities may cause serious damage to industrial production. To strengthen their network defense capabilities, industrial firewalls have been successfully developed to provide the access control service based on the defense-in-defense concept. In this paper, we first give a classified analysis on the intrinsic vulnerabilities from a network-related perspective. After that, we present several representative security technologies applied in today's industrial firewalls, and analyze their basic working principles and effects in practical application. Additionally, we further discuss some applicable security mechanisms which may take full advantage of burgeoning information technologies to provide better security services. Finally, we summarize three application modes of industrial firewalls in networked control systems, and show one application example of our industrial firewall in the real-world control system to verify its relatively fine properties. © 2024 Copyright held by the owner/author(s). Publication rights licensed to acm.

关键词： Networked control systems

来源：评论

学校读者我要写书评

暂无评论

access control Vulnerabilities in Network Protocol Implementations: How Attackers Exploit them and What To Do About It 23

Access Control Vulnerabilities in Network Protocol Implement...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： dos Santos, Daniel Ricardo Forescout Eindhoven Netherlands

ISBN: (纸本)9798400701733

Authentication and access control mechanisms should verify the identity of users of a system and ensure that these users only act within their intended permissions. these mechanisms, alongside audit or intrusion detection, have been called the "foundation for information and system security" [8]. there has been a large amount of research proposing authentication and authorization mechanisms for network protocols and devices used in Operational Technology (OT) and the Internet of things (IoT) [7]. Although these devices run our critical infrastructure, most of them still rely on simple password-based mechanisms to prevent unauthorized operations [1]. More worryingly, even these simple mechanisms often have flawed implementations, allowing malicious actors to bypass them [6]. In this talk, I will discuss several findings from our research into vulnerabilities in network protocol implementations of IoT, OT and IT systems, giving special attention to those stemming from flawed authentication and access control implementations. Examples include buffer overflows when processing user credentials, use of weak cryptography, credentials transmitted in plaintext, hardcoded credentials, authentication bypasses via MAC or IP spoofing, clientside authentication, missing critical steps in authentication, insufficient session expiration and message parsing before establishing a peer's identity. these issues were identified in implementations as diverse as embedded TCP/IP stacks [2, 3], routing suites and engineering protocols for OT devices from major vendors [9]. this type of vulnerability enables attackers to take devices offline, manipulate their operational parameters, and in many cases execute arbitrary code. I will also present statistics from a set of OT- and IoT-specific honeypots about attacks exploiting authentication bypasses, brute forcing passwords and leaking credentials. these statistics show that the most common initial access technique for these systems consist of

关键词： Network protocol Operational Technology Internet of things Vulnerability

来源：评论

学校读者我要写书评

暂无评论

Poster: A Flexible Relationship-Based access control Policy Generator 22

Poster: A Flexible Relationship-Based Access Control Policy ...

引用

27th acm symposium on access control models and technologies (SacmAT)

作者： Clark, Stanley Yakovets, Nikolay Fletcher, George H. L. Zannone, Nicola Eindhoven Univ Technol Eindhoven Netherlands

ISBN: (纸本)9781450393577

A plethora of Relationship-Based access control (ReBAC) models have been proposed, varying in the types of policies they can express. this fragmentation has stifled the creation of a benchmark to directly compare the performance of ReBAC systems based on their common supported policies. To solve this problem, we propose RACON, a schema-driven, customisable ReBAC policy generator. RACON generates policies in an intermediate language subsuming the features required to encode existing ReBAC models. this language can subsequently be translated to popular ReBAC policy languages through an extensible translation module. Taking a view of ReBAC policies as graph queries, we implement translations into two popular graph query languages, namely Cypher and SPARQL.

关键词： Policy generation Benchmark Relationship-Based access control

来源：评论

学校读者我要写书评

暂无评论

BlueSky: Physical access control: Characteristics, Challenges, and Research Opportunities 22

BlueSky: Physical Access Control: Characteristics, Challenge...

引用

27th acm symposium on access control models and technologies (SacmAT)

作者： Masoumzadeh, Amirreza van der Laan, Hans Dercksen, Albert SUNY Albany Albany NY 12222 USA Nedap NV Groenlo Netherlands

ISBN: (纸本)9781450393577

Physical access control (PAC) is an integral part of the physical security system of any organization. However, despite the size of the PAC industry and its importance in securing our physical environments, public research and development regarding PAC are limited. this paper aims to lower the barriers for the access control research community to explore and engage in the research opportunities regarding PAC systems. We characterize PAC systems and present an access control architecture that captures their central concepts, such as physical space models and different levels of policies, and processes such as policy conversion, enforcement, and analysis. We discuss how PAC can be distinguished from logical access control (LAC), which is applicable to cyber environments. We also present several unique challenges and research opportunities that the PAC domain introduces.

关键词： physical access control access control policy physical security policy conversion policy enforcement policy analysis

来源：评论

学校读者我要写书评

暂无评论

Poster: ASQL - Attribute Based access control Extension for SQL 22

Poster: ASQL - Attribute Based Access Control Extension for ...

引用

27th acm symposium on access control models and technologies (SacmAT)

作者： Paul, Proteet Gupta, Tushar Sural, Shamik Indian Inst Technol Kharagpur W Bengal India

ISBN: (纸本)9781450393577

In recent years, several attempts have been made to address the challenges associated with the implementation of Attribute Based access control (ABAC). However, almost all of these look at ABAC as an application-level access control model. In this paper, we show a direction towards supporting ABAC constructs in SQL for database-level access control. Required Structured Query Language (SQL) extensions are first proposed followed by a prototype implementation for MySQL, arguably the most popular open source relational database. Our initial experiments show encouraging results. the MySQL version with ASQL support is made freely available through our Github repository for any interested user to download and compile for generating the enhanced instance.

关键词： Attribute Based access control SQL Relational Databases MySQL

来源：评论

学校读者我要写书评

暂无评论

Modular Composition of access control Policies: A Framework to Build Multi-Site Multi-Level Combinations 22

Modular Composition of Access Control Policies: A Framework ...

引用

27th acm symposium on access control models and technologies (SacmAT)

作者： Bertolissi, Clara Fernandez, Maribel Univ Aix Marseille CNRS UMR 7020 Marseille France Kings Coll London London England

ISBN: (纸本)9781450393577

We present general notions of access control policy composition using the CBAC model. We show that CBAC provides a uniform framework to define compositions of heterogeneous policies (e.g., RBAC and ABAC policies) as required in many practical situations. Compositions can be built both horizontally (where.. given policies are combined to define a new policy) and vertically (where policies are extended by adding administration layers). We show that under some conditions on the operations used to build the composition, it is possible to ensure that the result preserves desirable properties (such as liveness and effectiveness). We also discuss mechanisms to detect and eliminate conflicts that may arise when composing policies originating from different sources.

关键词： access control Policy Composition Policy Administration Policy Analysis Category-Based access control

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共47页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：