检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是221-230 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Mobile security and privacy: The quest for the mighty access control 13

Mobile security and privacy: The quest for the mighty access...

引用

18th acm symposium on access control models and technologies, SacmAT 2013

作者： Sadeghi, Ahmad-Reza CASED/System Security Lab. Technische Universität Darmstadt Germany TU-Darmstadt Germany Darmstadt Germany

ISBN: (纸本)9781450319508

Mobile smart devices are changing our lives and are the emerging dominant computing platform for end-users. Mobile applications (apps) provide flexible access to critical services such as online banking, health records, enterprise applications, or social networks. The increasing computing and storage capabilities, new interfaces such as near field communication technology (NFC) or integration of hardware-based secure execution environments as well as rich context sensing capabilities have turned these devices to enablers for many useful (and fancy) applications. In particular, we consider two emerging trends with high commercial interest: smart devices as access tokens (e.g., in conjunction with NFC), and smart devices as powerful sensors for context-aware access control to resources. We elaborate on the functional, security, and privacy challenges to realizing these applications in practice. To tackle these challenges (and depending on the underlying use-case) we clearly need security and privacy protecting measures at different system abstraction layers (applications, operating system, and hardware) and we may need them simultaneously. Although mobile operating systems have been designed with security in mind from their infancy, they fail to resist sophisticated attacks as shown recently. We observe diverse attack vectors from application-level privilege escalation attacks and sensory malware [5, 9] to runtime attacks that hijack the execution flow of apps, in particular the recently proposed just-in-time return-oriented programming attack technique [7] which circumvents fine-grained address space layout randomization. Moreover, runtime attacks can be leveraged to compromise the underlying operating system through kernel based attacks (e.g., root exploits) allowing an attacker to get full control over the mobile device. In the recent years, researchers have presented many proposals to enhance the security and privacy at different abstraction layers with the strong

关键词： Mobile security

来源：评论

学校读者我要写书评

暂无评论

SacmAT'12 - proceedings of the 17th acm symposium on access control models and technologies

SACMAT'12 - Proceedings of the 17th ACM Symposium on Access ...

引用

17th acm symposium on access control models and technologies, SacmAT'12

ISBN: (纸本)9781450312950

The proceedings contain 27 papers. The topics discussed include: ensuring authorization privileges for cascading user obligations;generative models for access control policies: applications to role mining over logs with attribution;SCUTA: a server-side access control system for web applications;optimal workflow-aware authorizations;access control for RDF graphs using abstract models;a cloud-based RDF policy engine for assured information sharing;SecureBPMN: modeling and enforcing access control requirements in business processes;encryption-enforced access control for an RFID discovery service;automating architectural security analysis;a trust-and-risk aware RBAC framework: tackling insider threat;analyzing temporal role based access control models;a framework integrating attribute-based policies into role-based access control;and a framework for verification and optimal reconfiguration of event-driven role based access control policies.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Towards a policy enforcement infrastructure for distributed usage control 12

Towards a policy enforcement infrastructure for distributed ...

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Kelbert, Florian Pretschner, Alexander Karlsruhe Institute of Technology Am Fasanengarten 5 Karlsruhe Germany

ISBN: (纸本)9781450312950

Distributed usage control is concerned with how data may or may not be used after initial access to it has been granted and is therefore particularly important in distributed system environments. We present an application- and application-protocol-independent infrastructure that allows for the enforcement of usage control policies in a distributed environment. We instantiate the infrastructure for transferring files using FTP and for a scenario where smart meters are connected to a Facebook application. Copyright 2012 acm.

关键词： distributed usage control policy enforcement sticky policies security and privacy

来源：评论

学校读者我要写书评

暂无评论

Encryption-enforced access control for an RFID Discovery Service 12

Encryption-enforced access control for an RFID Discovery Ser...

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Kerschbaum, Florian Chaves, Leonardo Weiss Ferreira Department of Privacy and Data Security Technical University Dresden Germany SAP AG SAP Research Center Karlsruhe Germany

ISBN: (纸本)9781450312950

In this demonstration we present a novel encryption scheme for enforcing access control in a Discovery Service. A Discovery Service is a piece of software that allows one to "discover" item-level data which is stored in data repositories of different companies. Such data can be gathered with the help of Radio Frequency Identification or 2D bar codes. Our software allows the data owner to enforce access control on an item-level by managing the corresponding keys. Data remains confidential even against the provider of the Discovery Service. We present three ways of querying data and evaluate them with databases containing up to 50 million tuples. Copyright 2012 acm.

关键词： Radio frequency identification (RFID)

来源：评论

学校读者我要写书评

暂无评论

A model-based approach to automated testing of access control policies 12

A model-based approach to automated testing of access contro...

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Xu, Dianxiang Thomas, Lijo Kent, Michael Mouelhi, Tejeddine Le Traon, Yves National Center for the Protection of the Financial Infrastructure Dakota State University Madison SD 57042 United States Interdisciplinary Centre for Security Reliability and Trust University of Luxembourg Campus Kirchberg L-1359 Luxembourg

ISBN: (纸本)9781450312950

access control policies in software systems can be implemented incorrectly for various reasons. This paper presents a model-based approach for automated testing of access control implementation. To feed the model-based testing process, test models are constructed by integrating declarative access control rules and contracts (preconditions and post-conditions) of the associated activities. The access control tests are generated from the test models to exercise the interactions of access control activities. Test executability is obtained through a mapping of the modeling elements to implementation constructs. The approach has been implemented in an industry-adopted test automation framework that supports the generation of test code in a variety of languages, such as Java, C, C++, C#, and HTML/Selenium IDE. The full model-based testing process has been applied to two systems implemented in Java. The effectiveness is evaluated in terms of access-control fault detection rate using mutation analysis of access control implementation. The experiments show that the model-based tests killed 99.7% of the mutants and the remaining mutants caused no policy violations. Copyright 2012 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

SCUTA: A server-side access control system for web applications 12

SCUTA: A server-side access control system for web applicati...

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Tan, Xi Du, Wenliang Luo, Tongbo Soundararaj, Karthick D. Dept. of Electrical Engineering and Computer Science Syracuse University Syracuse NY United States

ISBN: (纸本)9781450312950

The Web is playing a very important role in our lives, and is becoming an essential element of the computing infrastructure. Unfortunately, its importance makes it the preferred target of attacks. Web-based vulnerabilities now outnumber traditional computer security concerns. A recent study shows that over 80 percent of web sites have had at least one serious vulnerability. We believe that the Web's problems, to a large degree, are caused by the inadequacy of its underlying access control systems. To reduce the number of vulnerabilities, it is essential to provide web applications with better access control models that can adequately address the protection needs of the current Web. As a part of the efforts to develop a better access control system for the Web, we focus on the server-side access control in this paper. We introduce a new concept called subsession, based on which, we have developed a ring-based access control system (called Scuta) for web servers. Scuta provides a fine-grained and backward-compatible access control mechanism for web applications. We have implemented Scuta in PHP, and have conducted comprehensive case studies to evaluate its benefits. Copyright 2012 acm.

关键词： Websites

来源：评论

学校读者我要写书评

暂无评论

Practical risk aggregation in RBAC models 12

Practical risk aggregation in RBAC models

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Chari, Suresh Lobo, Jorge Molloy, Ian IBM Research TJ Watson Hawthorne NY United States

ISBN: (纸本)9781450312950

This paper describes our system, built as part of a commercially available product, for inferring the risk in an RBAC policy model, i.e., the assignment of permissions to roles and roles to users. Our system implements a general model of risk based on any arbitrary set of properties of permissions and users. Our experience shows that fuzzy inferencing systems are best suited to capture how humans assign risk to such assignments. To implement fuzzy inferencing practically we need the axiom of monotonicity, i.e., risk can not decrease when more permissions are assigned to a role or when the role is assigned to fewer users. We describe the visualization component which administrators can use to infer aggregate risk in role assignments as well as drill down into which assignments are actually risky. Administrators can then use this knowledge to refactor roles and assignments. Copyright 2012 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

PlexC: A policy language for exposure control 12

PlexC: A policy language for exposure control

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Le Gall, Yann Lee, Adam J. Kapadia, Apu Department of Computer Science University of Pittsburgh Pittsburgh PA United States School of Informatics and Computing Indiana University Bloomington Bloomington IN United States

ISBN: (纸本)9781450312950

With the widespread use of online social networks and mobile devices, it is not uncommon for people to continuously broadcast contextual information such as their current location or activity. These technologies present both new opportunities for social engagement and new risks to privacy, and traditional static 'write once' disclosure policies are not well suited for controlling aggregate exposure risks in the current technological landscape. Therefore, we present PlexC, a new policy language designed for exposure control. We take advantage of several recent user studies to identify a set of language requirements and features, providing the expressive power to accommodate information sharing in dynamic environments. In our evaluation we show that PlexC can concisely express common policy idioms drawn from survey responses, in addition to more complex information sharing scenarios. Copyright 2012 acm.

关键词： Social networking (online)

来源：评论

学校读者我要写书评

暂无评论

Analyzing temporal role based access control models 12

Analyzing temporal role based access control models

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Uzun, Emre Atluri, Vijayalakshmi Sural, Shamik Vaidya, Jaideep Parlato, Gennaro Ferrara, Anna Lisa Madhusudan, P. Rutgers University United States Indian Institute of Technology India University of Southampton United Kingdom University of Bristol United Kingdom University of Illinois at Urbana-Champaign United States

ISBN: (纸本)9781450312950

Today, Role Based access control (RBAC) is the de facto model used for advanced access control, and is widely deployed in diverse enterprises of all sizes. Several extensions to the authorization as well as the administrative models for RBAC have been adopted in recent years. In this paper, we consider the temporal extension of RBAC (TRBAC), and develop safety analysis techniques for it. Safety analysis is essential for understanding the implications of security policies both at the stage of specification and modification. Towards this end, in this paper, we first define an administrative model for TRBAC. Our strategy for performing safety analysis is to appropriately decompose the TRBAC analysis problem into multiple subproblems similar to RBAC. Along with making the analysis simpler, this enables us to leverage and adapt existing analysis techniques developed for traditional RBAC. We have adapted and experimented with employing two state of the art analysis approaches developed for RBAC as well as tools developed for software testing. Our results show that our approach is both feasible and flexible. Copyright 2012 acm.

关键词： Software testing

来源：评论

学校读者我要写书评

暂无评论

SecureBPMN: Modeling and enforcing access control requirements in business processes 12

SecureBPMN: Modeling and enforcing access control requiremen...

引用

17th acm symposium on access control models and technologies, SacmAT'12

作者： Brucker, Achim D. Hang, Isabelle Lückemeyer, Gero Ruparel, Raj SAP Research Vincenz-Priessnitz-Str. 1 76131 Karlsruhe Germany Hochschule für Technik Stuttgart Schellingstr. 24 70174 Stuttgart Germany

ISBN: (纸本)9781450312950

Modern enterprise systems have to comply to regulations such as Basel III resulting in complex security requirements. These requirements need to be modeled at design-time and enforced at runtime. Moreover, modern enterprise systems are often business-process driven, i.e., the system behavior is described as high-level business processes that are executed by a business process execution engine. Consequently, there is a need for an integrated and tool-supported methodology that allows for specifying and enforcing compliance and security requirements for business process-driven enterprise systems. In this paper, we present a tool chain supporting both the design-time modeling as well as the run-time enforcement of security requirements for business process-driven systems. Copyright 2012 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 19 20 21 22 23 24 25 26 27 28 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：