检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是331-340 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Fine-grained access control to Web Databases 07

Fine-grained Access Control to Web Databases

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Roichman, Alex Gudes, Ehud Open Univ Dept Comp Sci Raanana Israel

ISBN: (纸本)9781595937452

Before the Web era, databases were well-protected by using the standard access control techniques such as Views and SQL authorization commands. But with the development of web systems, the number of attacks oil databases increased and it has become clear that their access control mechanism is inadequate for web-based systems. In particular, the SQL Injection and other vulnerabilities have received considerable attention in recent years, and satisfactory solutions to these kinds of attacks are still lacking. We present a new method For protecting web databases that is based on fine-grained access control mechanism. This method uses the databases' built-in access control mechanisms enhanced with Parameterized Views and adapts them to work with web applications. The proposed access control mechanism is applicable for any existing databases and is capable to prevent many kinds of attacks, thus significantly decreases the web databases' attack Surface.

关键词： access control web database security database vulnerability parameterized view session key rolling key

来源：评论

学校读者我要写书评

暂无评论

Multilevel Filesystems in Solaris Trusted Extensions 07

Multilevel Filesystems in Solaris Trusted Extensions

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Faden, Glenn Sun Microsyst Menlo Pk CA USA

ISBN: (纸本)9781595937452

Multilevel security is typically implemented by assigning fine-grained Security contexts, such as sensitivity labels to all subjects and objects. These extended security contexts require modifications to standard filesystems, and interfaces that affect system throughput and application compatibility. This trade-off between policy enforcement and performance tends to marginalize these systems to special-purpose environments. This paper describes a light-weight approach which avoids the requirement for customized filesystems or modified applications. Instead, the system is partitioned into labeled zones. Subjects and objects arc associated with these zones from which they inherit their sensitivity labels. This structured approach to data separation makes it possible to implement mandatory access control oil a mainstream operating system.

关键词： multilevel security mandatory access control file labeling

来源：评论

学校读者我要写书评

暂无评论

Role Engineering using Graph Optimisation 07

Role Engineering using Graph Optimisation

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Zhang, Dana Ramamohanarao, Kotagiri Ebringer, Tim Univ Melbourne Dept Comp Sci & Software Engn Melbourne Vic 3010 Australia

ISBN: (纸本)9781595937452

Role engineering is one of the fundamental phases for migrating existing enterprises to Role Based access control. In organisations with a large number of users and permissions, this task can be time consuming and costly if a top down approach is used. Existing bottom up approaches are not sufficient in producing a comprehensive set of roles for hierarchical Role Based access control. In this research, we propose a predominately bottom up approach that uses Graph Optimisation to identify appropriate role hierarchies. Additional partial role specifications can be incorporated to produce a hybrid approach. Using rules that reduce administration requirements, roles and their hierarchies are automatically extracted from large numbers of permission assignments. The results of the Graph Optimisation approach are hierarchical Role Based access control infrastructures that offer improved access control administration for the system.

关键词： Role-based access control role engineering role hierarchy role definition graph optimisation

来源：评论

学校读者我要写书评

暂无评论

PolicyMorph: Interactive Policy Transformations for a Logical Attribute-Based access control Framework 07

PolicyMorph: Interactive Policy Transformations for a Logica...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： LeMay, Michael Fatemieh, Omid Gunter, Carl A. Univ Illinois Dept Comp Sci Urbana IL 61801 USA

ISBN: (纸本)9781595937452

Constraint systems provide techniques for automatically analyzing the conformance of low-level access control policies to high-level business rules formalized as logical constraints. However, there are likely to be priorities for solutions that are not easy to encode formally, so administrator input is often important. This paper introduces PolicyMorph, a constraint system that supports interactive development and maintenance of access control policies that respect both formalized and un-formalized business rules and priorities. We provide a mathematical description of the system and an architecture for implementing it. We constructed a prototype that is validated using a case study in which constraints are imposed on a building automation system that controls door locks. PolicyMorph advances the state-of-art in constraint systems by suggesting predictable policy model modifications that will resolve specific constraint violations and then allowing policy administrators to select the appropriate modifications using knowledge that is not formally encoded in the constraint system.

关键词： attribute based access control policy administration separation of duty constraints

来源：评论

学校读者我要写书评

暂无评论

Formalizing XML access control for Update Operations 07

Formalizing XML Access Control for Update Operations

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Fundulaki, Irini Maneth, Sebastian Univ Edinburgh Edinburgh EH8 9YL Midlothian Scotland

ISBN: (纸本)9781595937452

Several languages have been proposed over the past years which support the specification of access control oil XML data. Most of these languages consider read-access restrictions only and do not deal with access rights for updates (such as add, delete, or modify operations). Fine-grain XML update operations are subject to current research. This paper proposes XACU, a language for specifying access control on XML. data in the presence of update operations. The update operations used in XACU are based oil the W3C XQuery. Update Facility working draft. A formal access control model is defined which allows to study propel-ties of XACU access policies. One essential property is consistency: the policy should not;allow the execution of a sequence of updates which lifts the same total effect, as an update forbidden by the policy. Since XACU is a rich language with inherent ambiguities, checking consistency of a set of XACU rules is difficult, and undecidable in general.

关键词： XML access control XML Updates

来源：评论

学校读者我要写书评

暂无评论

Using Semantics for Automatic Enforcement of access control Policies among Dynamic Coalitions 07

Using Semantics for Automatic Enforcement of Access Control ...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Warner, Janice Atluri, Vijayalakshmi Mukkamala, Ravi Vaidya, Jaideep Rutgers State Univ MSIS Dept Piscataway NJ 08855 USA

ISBN: (纸本)9781595937452

In a dynamic coalition environment, organizations should be able to exercise their own local fine-grained access control policies while sharing resources with external entities. In this paper, we propose an approach that exploits the semantics associated with subject and object attributes to facilitate automatic enforcement of organizational access control policies while resources sharing occurs among coalition members. Our approach relies on identifying the necessary attributes required by external users to gain access to a specific organizational object (or service). Specifically, it consists of extracting user attributes sets that semantically match with the attributes of the objects for which a role has permissions. This relies on a closer examination of why a user is assigned a specific role. These attribute sets are first pruned based on their significance in characterizing a role, which are then checked against those submitted by an external user to decide whether to allow or deny access to the specific object. While our goal in this paper is to support coalition based access control, the proposed approach can also aid in automating the process of role engineering.

关键词： access control Semantics Coalitions Collaboration

来源：评论

学校读者我要写书评

暂无评论

An Approach to Evaluate Policy Similarity 07

An Approach to Evaluate Policy Similarity

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Lin, Dan Rao, Priathima Bertino, Elisa Lobo, Jorge Purdue Univ Dept Comp Sci W Lafayette IN 47907 USA

ISBN: (纸本)9781595937452

Recent collaborative applications and enterprises very often need to efficiently integrate their access control policies. An important step in policy integration is to analyze the similarity of policies. Existing approaches to policy similarity analysis are mainly based oil logical reasoning and boolean function comparison. Such approaches are computationally expensive and do not;scale well for large heterogeneous distributed environments (like Grid computing systems). In this paper, we propose a policy similarity measure, as a filter phase for policy similarity analysis. This measure provides a lightweight approach to pre-compile a larger amount, of policies and only return the most similar policies for further evaluation. In the paper we formally define the measure, by taking into account both the case of categorical attributes and numeric attributes. Detailed algorithms are presented for the similarly computation. Results of out case study demonstrates the efficiency and practical value of our approach.

关键词： Policy similarity measure XacmL policies access control policies

来源：评论

学校读者我要写书评

暂无评论

Towards Realizing a Formal RBAC Model in Real Systems 07

Towards Realizing a Formal RBAC Model in Real Systems

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Ahn, Gail-Joon Hu, Hongxin Univ N Carolina Charlotte NC 28223 USA

ISBN: (纸本)9781595937452

There still exists an open question on how formal models can be fully realized in the system development phase. The Model Driven Development (MDD) approach has been recentlyintroduced to deal with such a critical issue for building high assurance software systems. The MDD approach focuses on the transformation of high-level design models to system implementation modules. However, this emerging development approach lacks an adequate procedure to address security issues derived from formal security models. In this paper, we propose an empirical framework to integrate security modle representiation, security policy specification, and systematic validation of security model and policy, which would be eventually used for accommodating security concerns during the sytem development. We also describe how our framework can minimize the gap between security models and the development of secure systems. In addition, we overview a proof-of-concept prototype of our tool that facilitates existing software engineering mechanisms to achieve the above-mentioned features of our framework.

关键词： access control Policy Specification Model Validation Code Generation

来源：评论

学校读者我要写书评

暂无评论

Chinese-Wall Process Confinement for Practical Distributed Coalitions 07

Chinese-Wall Process Confinement for Practical Distributed C...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Katsuno, Yasuharu Watanabe, Yuji Furuichi, Sanehiro Kudo, Michiharu IBM Res Corp Tokyo Res Lab Yamato Shi 2428502 Japan

ISBN: (纸本)9781595937452

A distributed coalition supports distributed mandatory access controls for resources whose security policies differ for each group of components over nodes, and provides secure information operations and exchanges with nodes that handle information over which conflicts of interest may occur. Many projects have proposed distributed coalitions using a virtual machine monitor, but this approach for strong confinement tends to hinder successful deployments in real world scenarios that involve complicated operations and management for applications because such access control is coarse-grained for the resources. In this paper, we propose a Chinese-Wall Process Confinement (CWPC) for practical application-level distributed coalitions that provide fine-grained access controls for resources and that emphasize minimizing the impact on the usability, using a program-transparent reference monitor. We implemented a prototype system named ALDC for standard office applications on Microsoft Windows that are used on a daily basis for business purposes and that may involve conflicts of interests, evaluated its performance and influence on usability, and show that our approach is practical.

关键词： Distributed System Distributed Coalition Process Confinement Mandatory access control

来源：评论

学校读者我要写书评

暂无评论

PEI models towards Scalable, Usable and High-Assurance Information Sharing 07

PEI Models towards Scalable, Usable and High-Assurance Infor...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Krishnan, Ram Sandhu, Ravi Ranganathan, Kumar George Mason Univ Lab Informat Secur Technol Fairfax VA 22030 USA

ISBN: (纸本)9781595937452

Secure Information Sharing (SIS) or "share but protect" is a challenging and elusive problem both because of its broad scope and complexity ranging right from conception (objective and policy) to culmination (implementation). In this paper., we consider how to solve SIS challenges with three main and conflicting objectives: scalability, usability and high-assurance. In the context of SIS, high-assurance requires strong controls oil the client. It is widely accepted that such controls cannot be entirely software-based. In this regard, we consider solutions based oil commercially emerging hardware-rooted Trusted Computing Technology. For SIS, we argue super-distribution ("protect once and access wherever authorized") and off-line access are necessary to achieve scalability and usability. We limit super-distribution to occur within a group of Trusted Platform Module [1] or TPM-enabled machine. For simplicity, we assume all content that are distributed to be read-only. Drilling down, we discuss Policy, Enforcement and Implementation (PEI) models for SIS within a group (group-based SIS or g-SIS).

关键词： Information Sharing Trusted Computing PEI Client-side access control High-Assurance

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 30 31 32 33 34 35 36 37 38 39 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：