检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是341-350 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

A Posteriori Compliance control 07

A Posteriori Compliance Control

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Etalle, Sandro Winsborough, William H. Univ Twente Enschede Netherlands

ISBN: (纸本)9781595937452

While preventative policy enforcement mechanisms can provide theoretical guarantees that policy is correctly enforced, they have limitations in practice. They are inflexible when unanticipated circumstances arise, and most are either inflexible with respect to the policies they can enforce or incapable of continuing to enforce policies on data objects as they move from one system to another. In this paper we propose an approach to enforcing policies not by preventing unauthorized use, but rather by deterring it. We believe this approach is complementary to preventative policy enforcement. We call our approach APPLE for A-Posteriori PoLicy Enforcement. We introduce APPLE Core, a logical framework for using logs to verity that actions taken by the system were authorized. A trust management system is used to ensure that data objects are provided only to users operating on auditable systems who are subject to penalty should they be found in violation. This combination of audit and accountability behavior, thereby allowing a high level of assurance of end-to-end policy enforcement.

关键词： access control trust management policy enforcement

来源：评论

学校读者我要写书评

暂无评论

Distributed access control: A Privacy-conscious Approach 07

Distributed Access Control: A Privacy-conscious Approach

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Cautis, Bogdan INRIA Futurs Futurs Italy

ISBN: (纸本)9781595937452

With more and more information being exchanged or published on the Web or in peer-to-peer, and with the significant growth in numbers of distributed, heterogeneous data sources, issues like access control and data privacy are becoming increasingly complex and difficult to manage. Very often, when dealing with sensitive information in such settings, the specification of access control policies and their enforcement are no longer handled by the actual data sources, and are (partially) delegated to third-parties. Besides practical reasons, this is the case when decisions regarding access depend oil factors which overpass the scope and knowledge of sonic of the entities involved. More specifically, policies may depend on private aspects concerning users (accessing data) or data owners. In this case, the only solution is to entrust some third-party authority with all the information needed to apply access policies. However, as the policies themselves depend on sensitive information, this outsourcing raises new privacy issues. that were not present in centralized environments. In particular, information leaks may occur during access control enforcement. In this paper, we consider theses issues and, starting from non-conventional digital signatures, we take a first step towards all implementation solution for such settings where both data and access policies are distributed. Our approach involves rewriting user queries into forms which are authorized. and we illustrate this for both structured (relational) and semi-structured (XML) data and queries.

关键词： access control privacy digital signatures relational data semi-structured data XML

来源：评论

学校读者我要写书评

暂无评论

Towards a VMM-based Usage control Framework for OS Kernel Integrity Protection 07

Towards a VMM-based Usage Control Framework for OS Kernel In...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Xu, Min Jiang, Xuxian Sandhu, Ravi Zhang, Xinwen George Mason Univ Fairfax VA 22030 USA

ISBN: (纸本)9781595937452

Protecting kernel integrity is one of the fundamental security objectives in building a trustworthy operating system (OS). For this end, a variety of approaches and systems have been proposed and developed. However, access control models used in most of these systems systems are not expressive enough important security requirements such as continuous policy enforcement and mutable process and object attributes. Even worse, most existing protection mechanisms in these systems reside in the same space as the running OS, which unfortunately can be disabled or subverted after an attacker successfully exploits kernel-level vulnerabilities (or features) to compromise the OS kernel. The increasing number of kernel-level rootkit attacks clearly demonstrates this threat. In this paper we present a simple but effective usage control model UCON kappa I with unique properties of decision continuity and attribute Mutability for OS kernel integrity protection. Further. to enforce UCON kappa I security policies, we propose a virtual machine monitor (VMM) based architecture that is isolated and protected front other untrusted processes inside a virtual machine (VM). We have implemented a proof-of-concept prototype in Linux to demonstrate the feasibility of our approach. Our experiments with 1.8 real-world kernel rootkits show that our approach is able to Successfully detect and prevent all kernel integrity violations from them. Beyond kernel integrity protection, we also explore additional opportunities for general OS security, such as the confinement of process activities as well as the protection of system utility programs at the VMM level.

关键词： authorization access control usage control UCON operating system protection kernel integrity VMM security architecture

来源：评论

学校读者我要写书评

暂无评论

Mesh: Secure, Lightweight Grid Middleware Using Existing SSH Infrastructure 07

Mesh: Secure, Lightweight Grid Middleware Using Existing SSH...

引用

12th acm symposium on access control models and technologies (SacmAT 2007)

作者： Kolano, Paul Z. NASA Ames Res Ctr Adv Supercomp Div Moffett Field CA 94035 USA

ISBN: (纸本)9781595937452

Grid computing promises gains in effective computational power. resource utilization, and resource accessibility, but in order to achieve these gains. organizations must deploy grid middleware that, in most cases. does not adhere to fundamental security principles. This paper introduces a new lightweight grid middleware called Mesh, which is based oil the addition of a single sign-on capability to the built-in public key authentication mechanism of SSH using system call interposition. The initial Mesh implementation is compatible;with approximately 90% of the world's SSH servers and any SSH client that supports public key authentication. Resources may be added to a Mesh-based grid in a matter of minutes using just five small files and two environment variable settings. Mesh adheres to fundamental security principles and was designed to be compatible with strong security mechanisms including two-factor authentication, SSH bastions, and restrictive firewalls. Mesh uses a remote command model, which is based on the syntax and commands already understood by users, thus requires no additional knowledge to utilize effectively. Several existing services have been integrated with Mesh to provide resource discovery and query, high performance file transfer, and job management.

关键词： SSH access control authentication authorization delegation distributed systems grids middleware security single sign-on

来源：评论

学校读者我要写书评

暂无评论

GEO-RBAC: A spatially aware RBAC 05

GEO-RBAC: A spatially aware RBAC

引用

10th acm symposium on access control models and technologies

作者： Damiani, Maria Luisa Bertino, Elisa Catania, Barbara Perlasca, Paolo Univ Milan Dipartimento Informat & Comunicaz I-20135 Milan Italy Ecole Polytech Fed Lausanne IC LBD CH-1015 Lausanne Switzerland Univ Genoa Dipartimento Informat & Sci Informat I-16146 Genoa Italy Purdue Univ CERIAS CS Dept W Lafayette IN 47907 USA Purdue Univ ECE Sch W Lafayette IN 47907 USA

ISBN: (纸本)9781595930453

Securing access to data in location- based services and mobile applications requires the definition of spatially aware access- control systems. Even if some approaches have already been proposed either in the context of geographic database systems or context- aware applications, a comprehensive framework, general and flexible enough to deal with spatial aspects in real mobile applications, is still missing. In this paper, we make one step toward this direction and present GEO- RBAC, an extension of the RBAC model enhanced with spatial- and location- based information. In GEOR-BAC, spatial entities are used to model objects, user positions, and geographically bounded roles. Roles are activated based on the position of the user. Besides a physical position, obtained from a given mobile terminal or a cellular phone, users are also assigned a logical and device- independent position, representing the feature ( the road, the town, the region) in which they are located. To enhance flexibility and reusability, we also introduce the concept of role schema, specifying the name of the role, as well as the type of the role spatial boundary and the granularity of the logical position. We then extend GEO- RBAC to support hierarchies, modeling permission, user, and activation inheritance, and separation of duty constraints. The proposed classes of constraints extend the conventional ones to deal with different granularities ( schema/ instance level) and spatial information. We conclude the paper with an analysis of several properties concerning the resulting model.

关键词： GIS access-control model location-based services

来源：评论

学校读者我要写书评

暂无评论

Threshold-based Collaborative access control (T-CAC)

Threshold-based Collaborative Access Control (T-CAC)

引用

International symposium on Collaborative technologies and Systems

作者： Alsulaiman, Fawaz A. Miege, Alexandre El Saddik, Abdulmotaleb Univ Ottawa Sch Informat Technol & Engn MCR Lab Ottawa ON Canada

ISBN: (纸本)9780978569914

User's information confidentiality, and privacy rise with the increased usage of computers by various organizations. Abuse of privileges might occur when the trust is based on a single person. Moreover, access control models usually, consider only regular policies and are not appropriate to unusual or exceptional circumstances. For instance, in case of emergencies many users might override the access control system in order to access unauthorized sensitive data which is undesirable. In this paper we introduce a novel model named Threshold-based Collaborative access control (T-CAC). T-CAC makes it possible to specify some collaboration among various users in order to obtain permission. This relies on the intuitive idea that collaboration among users reduces the possibility of privilege abuse and presents trust as distributed over several people instead of just one person. According to users' roles, T-CAC specify weights toward permissions. Furthermore, every permission is associated to thresholds. Thresholds determine the required weight submitted by, a user to gain the requested permission. This might require collaboration with several users who belong to several roles. T-CAC allow us to better design policies that fit situations, such as emergencies and exceptions, based on possible collaborations.

关键词： security access control threshold collaborative systems cooperation privacy

来源：评论

学校读者我要写书评

暂无评论

Towards a resource-safe Erlang

Towards a resource-safe Erlang

引用

International symposium on Collaborative technologies and Systems

作者： Teller, David Fac Sci Lab Informat Fondamentale Orleans F-18028 Bourges France

ISBN: (纸本)9780978569914

Slowly but surely, industry is discovering the need for programming languages, runtime environments and methodologies adapted to collaborative and distributed computing platforms. However, current distributed platforms, whether industrial or academic, are generally fragile with respect to resource exhaustion, and can provide, at best, ad hoc solutions to counter accidents or Denial of Service attacks. In this paper, we examine the problem of resource management in Erlang, that is providing services for distant use, while ensuring that untrusted third-parties using the services may not cause the exhaustion of memory, file handles or other limited resources. For this, we use Targettable/Extendable pi-Calculus specification language and provide a formal semantics for a subset of Core Erlang, as well as a model of some of its library From these models, we derive a type system for formally guaranteeing robustness of services with respect to Denial of Service attacks.

关键词： resistance to Denial of Service access control security in multi agent systems

来源：评论

学校读者我要写书评

暂无评论

Session details: access control in novel systems 07

Session details: Access control in novel systems

引用

proceedings of the 12th acm symposium on access control models and technologies

作者： E. Bertino Purdue University

No abstract available.

ISBN: (纸本)9781595937452

No abstract available.