检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是211-220 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Enabling intensional access control via preference-aware query optimization 13

Enabling intensional access control via preference-aware que...

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Farnan, Nicholas L. Lee, Adam J. Chrysanthis, Panos K. Yu, Ting Department of Computer Science University of Pittsburgh Pittsburgh PA United States Department of Computer Science North Carolina State University Raleigh NC United States

ISBN: (纸本)9781450319508

Although the declarative nature of SQL provides great utility to database users, its use in distributed database management systems can result in unintended consequences to user privacy over the course of query evaluation. By allowing users to merely say what data they are interested in accessing without providing guidance regarding how to retrieve it, query optimizers can generate plans that leak sensitive query intension. To address these types of issues, we have created a framework that empowers users with the ability to specify access controls on the intension of their queries through extensions to the SQL SELECT statement. In this demonstration, we present a version of PostgreSQL's query optimizer that we have modified to produce plans that respect these constraints while optimizing user-specified SQL queries in terms of performance. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Content-based information protection and release in NATO operations 13

Content-based information protection and release in NATO ope...

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Armando, Alessandro Grasso, Matteo Oudkerk, Sander Ranise, Silvio Wrona, Konrad DIBRIS U. of Genova Italy Security and Trust Unit FBK-Irst Trento Italy Agent Sierra Consultancy Services Amsterdam Netherlands NATO Communications and Information Agency The Hague Netherlands

ISBN: (纸本)9781450319508

The successful operation of NATO missions requires effective and secure sharing of information among coalition partners and external organizations, while avoiding the disclosure of sensitive information to untrusted users. To resolve the conflict between confidentiality and availability, NATO is developing a new information sharing infrastructure, called Content-based Protection and Release. We describe the architecture of access control in NATO operations, which is designed to be easily built on top of available (service-oriented) infrastructures for identity and access control management. We then present a use case scenario drawn from the NATO Passive Missile Defence system for simulating the consequences of intercepting missile attacks. In the system demonstration, we show how maps annotated with the findings of the system are filtered by the access control module to produce appropriate views for users with different clearances and terminals under given release and protection policies. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Beyond accountability: Using obligations to reduce risk exposure and deter insider attacks 13

Beyond accountability: Using obligations to reduce risk expo...

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Baracaldo, Nathalie Joshi, James University of Pittsburgh School of Information Sciences United States

ISBN: (纸本)9781450319508

Recently, the importance of including obligations as part of access control systems for privilege management, for example, in healthcare information systems, has been well recognized. In an access control system, an a posteriori obligation states which actions need to be performed by a user after he has accessed a resource. There is no guarantee that a user will fulfill a posteriori obligations. Not fulfilling these obligations may incur financial loss, or loss of goodwill and productivity to the organization. In this paper, we propose a trust-and-obligation based framework that reduces the risk exposure of an organization associated with a posteriori obligations. We propose a methodology to assign trust values to users to indicate how trustworthy they are with regards to fulfilling their obligations. When access requests that trigger a posteriori obligations are evaluated, the requesting users' trust values and the criticality of the associated obligations are used. Our framework detects and mitigates insider attacks and unintentional damages that may result from violating a posteriori obligations. Our framework also provides mechanisms to determine misconfigurations of obligation policies. We evaluate our framework through simulations and demonstrate its effectiveness. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

On the notion of redundancy in access control policies 13

On the notion of redundancy in access control policies

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Guarnieri, Marco Neri, Mario Arrigoni Magri, Eros Mutti, Simone Institute of Information Security ETH Zürich Switzerland Università degli Studi Bergamo Italy Comelit R and D Comelit Group S.p.A Italy

ISBN: (纸本)9781450319508

The evolution of information systems sees an increasing need of flexible and sophisticated approaches for the automated detection of anomalies in security policies. One of these anomalies is redundancy, which may increase the total cost of management of the policies and may reduce the performance of access control mechanisms and of other anomaly detection techniques. We consider three approaches that can remove redundancy from access control policies, progressively reducing the number of authorizations in the policy itself. We show that several problems associated with redundancy are NP-hard. We propose exact solutions to two of these problems, namely the Minimum Policy Problem, which consists in computing the minimum policy that represents the behaviour of the system, and the Minimum Irreducible Policy Problem, consisting in computing the redundancy-free version of a policy with the smallest number of authorizations. Furthermore we propose heuristic solutions to those problems. We also present a comparison between the exact and heuristics solutions based on experiments that use policies derived from bibliographical databases. Copyright 2013 acm.

关键词： Redundancy

来源：评论

学校读者我要写书评

暂无评论

HyXAC: A hybrid approach for XML access control 13

HyXAC: A hybrid approach for XML access control

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Thimma, Manogna Tsui, Tsam Kai Luo, Bo Cerner Corporation Kansas City MO United States NIPR Kansas City MO United States EECS University of Kansas Lawrence KS United States

ISBN: (纸本)9781450319508

While XML has been widely adopted for information sharing over the Internet, the need for efficient XML access control naturally arise. Various XML access control enforcement mechanisms have been proposed in the research community, such as view-based approaches and pre-processing approaches. Each category of solutions has its inherent advantages and disadvantages. For instance, view based approach provides high performance in query evaluation, but suffers from the view maintenance issues. To remedy the problems, we propose a hybrid approach, namely HyXAC: Hybrid XML access control. HyXAC provides efficient access control and query processing by maximizing the utilization of available (but constrained) resources. HyXAC first uses the pre-processing approach as a baseline to process queries and define sub-views. In HyXAC, views are not defined in a per-role basis, instead, a sub-view is defined for each access control rule, and roles with identical rules would share the sub-view. Moreover, HyXAC dynamically allocates the available resources (memory and secondary storage) to materialize and cache sub-views to improve query performance. With intensive experiments, we have shown that HyXAC optimizes the usage of system resource, and improves the performance of query processing. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Permission path analysis based on access intelligence 13

Permission path analysis based on access intelligence

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Sturm, Detlef Kern, Axel Beta Systems Software AG Alt-Moabit 90d D-10559 Berlin Germany Beta Systems Software AG Josef-Lammertings-Allee 14 D-50933 Köln Germany

ISBN: (纸本)9781450319508

The current Idintity and access Management (IAM) landscape mainly consists of classic Identity Management (IdM) and business-oriented access Governance. IdM focuses more on providing a single point of administration and provisioning users with the needed access rights. In contrast, access Governance concentrates on integrating business departments in the assignment and controlling of access rights in the organisation. It therefore provides functions like access request and approval workflows and access certification processes. In addition, the demand to analyse access right structures to cover compliance requirements increases. We therefore use a business intelligence (BI) based approach to complement the current IAM landscape with comprehensive and powerful analysis capabilities. We see the following additional values in providing a separate access Intelligence system: • Using a BI system allows us to convert the access data into a format which allows flexible and fast analytics. • We can fulfil the demand of many organisations to separate their operative access control systems and the analytics system. Using the well-known capabilities of a BI system, new analyses are provided. One example is the permission path analysis. It divides complex access structures into single paths and thereby lays the foundation for effective access right analyses. In this paper we present the permission path analysis and describe two evaluations based on it. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Information flow control for stream processing in clouds 13

Information flow control for stream processing in clouds

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Xie, Xing Ray, Indrakshi Adaikkalavan, Raman Gamble, Rose Computer Science Department Colorado State University Fort Collins CO 80523 United States Computer and Information Sciences Indiana University South Bend South Bend IN 46634 United States Tandy School of Computer Science University of Tulsa Tulsa OK 74104 United States

ISBN: (纸本)9781450319508

In the near future, clouds will provide situational monitoring services using streaming data. Examples of such services include health monitoring, stock market monitoring, shopping cart monitoring, and emergency control and threat management. Offering such services require securely processing data streams generated by multiple, possibly competing and/or complementing, organizations. Processing of data streams also should not cause any overt or covert leakage of information across organizations. We propose an information flow control model adapted from the Chinese Wall policy that can be used to protect against sensitive data disclosure. We propose architectures that are suitable for securely and efficiently processing streaming information belonging to different organizations. We discuss how performance can be further improved by sharing the processing of multiple queries. We demonstrate the feasibility of our approach by implementing a prototype of our system and show the overhead incurred due to the information flow constraints. Copyright 2013 acm.

关键词： Flow control

来源：评论

学校读者我要写书评

暂无评论

Ensuring continuous compliance through reconciling policy with usage 13

Ensuring continuous compliance through reconciling policy wi...

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Chari, Suresh Molloy, Ian Park, Youngja Teiken, Wilfried IBM T.J. Watson Research Yorktown Heights NY United States

ISBN: (纸本)9781450319508

Organizations rarely define formal security properties or policies for their access control systems, often choosing to react to changing needs. This paper addresses the problem of reconciling entitlement usage with configured policies for multiple objectives: policy optimization and risk mitigation. Policies should remain up-to-date, maintaining least privilege, and using unambiguous constructs that reduce administrative stress. We describe a number of algorithms and heuristics, validated on real-world data, to address various aspects of reconciling access control policies with security audit logs. The first set of algorithms track and correlate which policy items enable which actions, using which we can identify over privileged entitlements, redundant policy items that may not be correctly revoked by administrators, rarely used entitlements, and overly permissive entitlements. They can help reduce administrative errors and general operational risk. The second body of work compares user groups defined in the policy with roles generated from the actual usage patterns, from which we derive quality and security measures for policy groups. Finally, we track policy changes through assignments and revocations and test precursors for such changes (e.g., a failed request before an assignment). Broadly speaking, this body of work presents different facets of continuous compliance to see if the enforced security policy and the resulting usage is consistent with a common intended security goal. Copyright 2013 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Panel on granularity in access control 13

Panel on granularity in access control

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Molloy, Ian Tripunitara, Mahesh Lotz, Volkmar Kuhlmann, Martin Schaufler, Casey Atluri, Vijay IBM Research TJ Watson United States University of Waterloo Canada SAP Global Research Canada Omada Canada Intel Open Source Technology Center Canada Rutgers University United States

ISBN: (纸本)9781450319508

This panel will address the following question. Does an increase in the granularity of access control systems produce a measurable reduction in risk and help meet the goals of the organization, or is the cost prohibitively high? After decades of access control research, products, and practice, there has been a trend towards more complex access control policies and models that more finely restrict (or allow) access to resources. This allows policy administrators to more closely specify any high level abstract policy they may have in mind, or accurately enforce regulations such as HIPPA, SOX, or PCI. The end goal is to allow only those actions that are desirable in hindsight, or via an approach to which Bishop et al. [2] refer as the Oracle Policy. As the expressive power of access control models can vary [4], an administrator may need a more powerful model to specify the high level policy they need for their particular application. It is not uncommon for new models to add new key-attributes, data-sources, features, or relations to provide a richer set of tools. This has resulted in an explosion of new one-off models in the literature, few of which make their way to real products or deployment. To increase the expressive power of a model, increase its granularity, reduce the complexity of administration and to answer desirable security queries such as safety, a plethora of new concepts have been added to access control models. To name a few: groups and roles;hierarchies and constraints;parameterized permissions;exceptions;time and location of users and resources;relationships between subjects;attributes of subjects, objects, and actions;information flow;conflict of interest classes;obligations;trust, benefit, and risk;workflows;delegation;situational awareness and context;and so on. All of these constructs build to a metamodel, as Barker observes [1]. This granularity has resulted in many novel and useful findings, new algorithms, and challenging open research issues,

关键词： Query processing

来源：评论

学校读者我要写书评

暂无评论

Searching over encrypted data in cloud systems 13

Searching over encrypted data in cloud systems

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Kerschbaum, Florian SAP Research Karlsruhe Germany

ISBN: (纸本)9781450319508

Security is still a major inhibitor of cloud computing. When companies are testing cloud applications, e.g. for storage or databases, they use generated data for fear of data loss. Modern encrypted databases where the cryptographic key remains at the client provide a solution to this problem. Recent results in cryptography, such order-preserving encryption, and database systems [3] enable the practical use of these systems. We report on our pre-development efforts of implementing such an encrypted database in an inmemory, column store database [1]. We highlight some unsolved research challenges: such as access control, infrequent queries and security vs. performance query optimization. Challenges to key management in multi-user environments remain largely unsolved [2]. We give an overview of the architecture and performance benchmarks on our prototype which are very encouraging for practical adoption. The talk is structured in three parts: 1. We will give background on the architecture of the cloud database. First, we present overviews of recent developments in cryptography, e.g., order-preserving encryption, searchable encryption, proxy re-encryption and somewhat homomorphic encryption. Second, we give an introduction to new in-memory, column-store database architectures including compression techniques such as order-preserving dictionaries and multi-core database operators. 2. We highlight some research challenges, such as access control, infrequent queries, security vs. performance trade-offs and key management. Particularly, in multi-user environments databases need to handle access control, as well as sophisticated key management. Furthermore, when using adjustable (onion) encryption selection queries can modify the (security) state of the database. 3. We report on some initial pre-development results in our research group. We implemented a prototype and can give some performance figures. Furthermore, we show our progress on some of the outlined challenges.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 18 19 20 21 22 23 24 25 26 27 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：