检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是91-100 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

CMCAP: Ephemeral Sandboxes for Adaptive access control 19

CMCAP: Ephemeral Sandboxes for Adaptive Access Control

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Bucuti, Theogene Hakiza Dantu, Ram Morozov, Kirill Univ North Texas Dept Comp Sci & Engn Denton TX 76203 USA

ISBN: (纸本)9781450367530

We present CMCAP (context-mapped capabilities), a decentralized mechanism for specifying and enforcing adaptive access control policies for resource-centric security. Policies in CMCAP express runtime constraints defined as containment domains with context-mapped capabilities, and ephemeral sandboxes for dynamically enforcing desired information flow properties while preserving functional correctness for the sandboxed programs. CMCAP is designed to remediate DAC's weakness and address the inflexibility that makes current MAC frameworks impractical to the common user. We use a Linux-based implementation of CMCAP to demonstrate how a program's dynamic profile is used for access control and intrusion prevention.

关键词： adaptive access control runtime containment intrusion prevention ephemeral sandboxes information flow control

来源：评论

学校读者我要写书评

暂无评论

CloudProtect - A Cloud-based Software Protection Service 19

CloudProtect - A Cloud-based Software Protection Service

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Schaad, Andreas Grohmann, Bjeorn Winzenried, Oliver Univ Appl Sci Offenburg Badstr 24 D-77652 Offenburg Germany Wibu Syst AG Ruppurer Str 52 D-76137 Karlsruhe Germany

ISBN: (纸本)9781450367530

Protecting software from illegal access, intentional modification or reverse engineering is an inherently difficult practical problem involving code obfuscation techniques and real-time cryptographic protection of code. In traditional systems a secure element (the "dongle") is used to protect software. However, this approach suffers from several technical and economical drawbacks such as the dongle being lost or broken. We present a system that provides such dongles as a cloud service, and more importantly, provides the required cryptographic material to control access to software functionality in real-time. This system is developed as part of an ongoing nationally funded research project and is now entering a first trial stage with stakeholders from different industrial sectors.

关键词： Software protection cryptographic access control cloud service

来源：评论

学校读者我要写书评

暂无评论

CAOS: Concurrent-access Obfuscated Store 19

CAOS: Concurrent-Access Obfuscated Store

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Ordean, Mihai Ryan, Mark Galindo, David Univ Birmingham Birmingham W Midlands England Fetch AI Cambridge England

ISBN: (纸本)9781450367530

This paper proposes Concurrent-access Obfuscated Store (CAOS), a construction for remote data storage that provides access-pattern obfuscation in a honest-but-curious adversarial model, while allowing for low bandwidth overhead and client storage. Compared to other approaches, the main advantage of CAOS is that it supports concurrent access without a proxy, for multiple read-only clients and a single read-write client. Concurrent access is achieved by letting clients maintain independent maps that describe how the data is stored. Even though the maps might diverge from client to client, the protocol guarantees that clients will always have access to the data. Efficiency and concurrency are achieved at the expense of perfect obfuscation: in CAOS the extent to which access patterns are hidden is determined by the resources allocated to its built-in obfuscation mechanism. To assess this trade-off we provide both a security and a performance analysis of CAOS. We additionally provide a proof-of-concept implementation(1).

关键词： data obfuscation concurrent-access obfuscated store access pattern

来源：评论

学校读者我要写书评

暂无评论

HITC: Data Privacy in Online Social Networks with Fine-Grained access control 19

HITC: Data Privacy in Online Social Networks with Fine-Grain...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Abdulla, Ahmed Khalil Bakiras, Spiridon Hamad Bin Khalifa Univ Coll Sci & Engn Div Informat & Comp Technol Doha Qatar

ISBN: (纸本)9781450367530

Online Social Networks (OSNs), such as Facebook and Twitter, are popular platforms that enable users to interact and socialize through their networked devices. The social nature of such applications encourages users to share a great amount of personal data with other users and the OSN service providers, including pictures, personal views, location check-ins, etc. Nevertheless, recent data leaks on major online platforms demonstrate the ineffectiveness of the access control mechanisms that are implemented by the service providers, and has led to an increased demand for provably secure privacy controls. To this end, we introduce Hide In The Crowd (HITC), a flexible system that leverages encryption-based access control, where users can assign arbitrary decryption privileges to every data object that is posted on the OSN platforms. The decryption privileges can be assigned on the finest granularity level, for example, to a hand-picked group of users. HITC is designed as a browser extension and can be integrated to any existing OSN platform without the need for a third-party server. We describe our prototype implementation of HITC over Twitter and evaluate its performance and scalability.

关键词： Data privacy access control hidden vector encryption online social networks

来源：评论

学校读者我要写书评

暂无评论

Brokering Policies and Execution Monitors for IoT Middleware 19

Brokering Policies and Execution Monitors for IoT Middleware

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Carranza, Juan Carlos Fuentes Fong, Philip W. L. Univ Calgary Calgary AB Canada

ISBN: (纸本)9781450367530

Event-based systems lie at the heart of many cloud-based Internet-of-Things (IoT) platforms. This combination of the Broker architectural style and the Publisher-Subscriber design pattern provides a way for smart devices to communicate and coordinate with one another. The present design of these cloud-based IoT frameworks lacks measures to (i) protect devices against malicious cloud disconnections, (ii) impose information flow control among communicating parties, and (iii) enforce coordination protocols in the presence of compromised devices. In this work, we propose to extend the modular event-based system architecture of Fiege et al., to incorporate brokering policies and execution monitors, in order to address the three protection challenges mentioned above. We formalized the operational semantics of our protection scheme, explored how the scheme can be used to enforce BLP-style information flow control and RBAC-style protection domains, implemented the proposal in an open-source MQTT broker, and evaluated the performance impact of the protection mechanisms.

关键词： Internet of Things Middleware MQTT access control Brokering Policy Execution Monitor Edit Automata Information Flow control History-Based access control Performance Evaluation

来源：评论

学校读者我要写书评

暂无评论

Toward Detection of access control models from Source Code via Word Embedding 19

Toward Detection of Access Control Models from Source Code v...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Heaps, John Wang, Xiaoyin Breaux, Travis Niu, Jianwei Univ Texas San Antonio San Antonio TX 78249 USA Carnegie Mellon Univ Pittsburgh PA 15213 USA

ISBN: (纸本)9781450367530

Advancement in machine learning techniques in recent years has led to deep learning applications on source code. While there is little research available on the subject, the work that has been done shows great potential. We believe deep learning can be leveraged to obtain new insight into automated access control policy verification. In this paper, we describe our first step in applying learning techniques to access control, which consists of developing word embeddings to bootstrap learning tasks. We also discuss the future work on identifying access control enforcement code and checking access control policy violations, which can be enabled by word embeddings.

关键词： word embeddings deep learning access control

来源：评论

学校读者我要写书评

暂无评论

A Rule-based Approach to the Decidability of Safety of ABACα 19

A Rule-based Approach to the Decidability of Safety of ABACα

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Marin, Mircea Kutsia, Temur Dundua, Besik West Univ Timisoara Timisoara Romania Johannes Kepler Univ Linz RISC Linz Austria Tbilisi State Univ VIAM Tbilisi Georgia Int Black Sea Univ Tbilisi Georgia

ISBN: (纸本)9781450367530

ABAC(alpha) is a foundational model for attribute-based access control with a minimal set of capabilities to configure many access control models of interest, including the dominant traditional ones: discretionary (DAC), mandatory (MAC), and role-based (RBAC). A fundamental security problem in the design of ABAC is to ensure safety, that is, to guarantee that a certain subject can never gain certain permissions to access certain object(s). We propose a rule-based specification of ABAC(alpha) and of its configurations, and the semantic framework of rho Log to turn this specification into executable code for the operational model of ABAC(alpha). Next, we identify some important properties of the operational model which allow us to define a rule-based algorithm for the safety problem, and to execute it with rho Log. The outcome is a practical tool to check safety of ABAC(alpha) configurations. rho Log is a system for rule-based programming with strategies and built-in support for constraint logic programming (CLP). We argue that rho Log is an adequate framework for the specification and verification of safety of ABAC(alpha) configurations. In particular, the authorization policies of ABAC(alpha) can be interpreted properly by the CLP component of rho Log, and the operations of its functional specification can be described by five strategies defined by conditional rewrite rules.

关键词： attribute based access control (ABAC) rule-based programming safety

来源：评论

学校读者我要写书评

暂无评论

access control for Binary Integrity Protection using Ethereum 19

Access Control for Binary Integrity Protection using Ethereu...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Stengele, Oliver Baumeister, Andreas Birnstill, Pascal Hartenstein, Hannes Karlsruhe Inst Technol Inst Telemat Karlsruhe Germany Fraunhofer IOSB Karlsruhe Germany

ISBN: (纸本)9781450367530

The integrity of executable binaries is essential to the security of any device that runs them. At best, a manipulated binary can leave the system in question open to attack, and at worst, it can compromise the entire system by itself. In recent years, supply-chain attacks have demonstrated that binaries can even be compromised unbeknownst to their creators. This, in turn, leads to the dissemination of supposedly valid binaries that need to be revoked later. In this paper, we present and evaluate a concept for publishing and revoking integrity protecting information for binaries, based on the Ethereum Blockchain and its underlying peer-to-peer network. Smart Contracts are used to enforce access control over the publication and revocation of integrity preserving information, whereas the peer-to-peer network serves as a fast, global communication service to keep user clients informed. The Ethereum Blockchain serves as a tamper-evident, publicly-verifiable log of published and revoked binaries. Our implementation incurs costs comparable to registration fees for centralised software distribution platforms but allows publication and revocation of individual binaries within minutes. The proposed concept can be integrated incrementally into existing software distribution platforms, such as package repositories or various app stores.

关键词： Blockchain binary integrity protection revocation

来源：评论

学校读者我要写书评

暂无评论

Towards Effective Verification of Multi-Model access control Properties 19

Towards Effective Verification of Multi-Model Access Control...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Berger, Bernhard J. Maeder, Christian Nguempnang, Rodrigue Wete Sohr, Karsten Rubio-Medrano, Carlos Univ Bremen Bremen Germany Arizona State Univ Tempe AZ USA

ISBN: (纸本)9781450367530

Many existing software systems like logistics systems or enterprise applications employ data security in a more or less ad hoc fashion. Our approach focuses on access control such as permission-based discretionary access control (DAC), variants of role-based access control (RBAC) with delegation, and attribute-based access control (ABAC). Typically, software systems implement hybrid access control making an effective security analysis and assessment rather difficult. We propose an analysis methodology to reconstruct access control using a novel modular access control model. Our modular approach allows us to flexibly model exactly those access properties that are relevant for a given system. As formalism we use the Object Constraint Language (OCL) with Ecore from the Eclipse Modeling Framework (EMF). We demonstrate the suitability of our access control model for three software systems: a port community system (PCS), a clinical information system (CIS), and an identity management system (IdMS). For the PCS and CIS we model concrete roles and policies. For the IdMS we evaluate our analysis methodology in-depth by reconstructing access control policies from byte code using the Soot analysis framework as well as model transformation techniques (QVTo). The resulting model helped us to identify design deficiencies. Violated OCL invariants such as for mutually exclusive roles or cardinality constraints revealed non-trivial security vulnerabilities.

关键词： access control Model Permissions RBAC ABAC Delegation OCL Reverse Engineering

来源：评论

学校读者我要写书评

暂无评论

Efficient and Extensible Policy Mining for Relationship-Based access control 19

Efficient and Extensible Policy Mining for Relationship-Base...

引用

24th acm symposium on access control models and technologies (SacmAT)

作者： Bui, Thang Stoller, Scott D. Le, Hieu SUNY Stony Brook Stony Brook NY 11794 USA

ISBN: (纸本)9781450367530

Relationship-based access control (ReBAC) is a flexible and expressive framework that allows policies to be expressed in terms of chains of relationship between entities as well as attributes of entities. ReBAC policy mining algorithms have a potential to significantly reduce the cost of migration from legacy access control systems to ReBAC, by partially automating the development of a ReBAC policy. Existing ReBAC policy mining algorithms support a policy language with a limited set of operators;this limits their applicability. This paper presents a ReBAC policy mining algorithm designed to be both (1) easily extensible (to support additional policy language features) and (2) scalable. The algorithm is based on Bui et al.'s evolutionary algorithm for ReBAC policy mining algorithm. First, we simplify their algorithm, in order to make it easier to extend and provide a methodology that extends it to handle new policy language features. However, extending the policy language increases the search space of candidate policies explored by the evolutionary algorithm, thus causes longer running time and/or worse results. To address the problem, we enhance the algorithm with a feature selection phase. The enhancement utilizes a neural network to identify useful features. We use the result of feature selection to reduce the evolutionary algorithm's search space. The new algorithm is easy to extend and, as shown by our experiments, is more efficient and produces better policies.

关键词： security policy mining attribute-based access control relationship-based access control feature selection

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 6 7 8 9 10 11 12 13 14 15 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：