检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是401-410 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

On the role of roles: from role-based to role-sensitive access control 04

On the role of roles: from role-based to role-sensitive acce...

引用

proceedings of the ninth acm symposium on access control models and technologies

作者： Xuhui Ao Naftaly H. Minsky Rutgers University Piscataway NJ

ISBN: (纸本)9781581138726

This paper maintains that for an access-control (AC) mechanism tosupport a wide range of policies, it is best to dispense with any built-insemantics for roles in the mechanism itself---be it the semantics of RBAC, orany other---leaving such semantics to be defined by particular policies. Inother words, an AC mechanism should be sensitive to roles, allowingspecific policies to take roles into account for their authorizationdecisions. But it should not be based on any particular interpretationof the structure of roles, or of their effect on access control. The validity of this assertion is demonstrated by showing that a mechanismcalled Law-governed interaction (LGI), which has no built-in concept of roles,can nevertheless support a wide range of policies that take roles intoaccount. These include RBAC itself, its various generalizations, as well asconcepts like budgetary controls, which seems to be quite inconsistent withRBAC. All such policies can be formulated, deployed, and enforced, via asingle scalable, and fully implemented LGI mechanism.

关键词： security role-based access control law-governed interaction access control policy specification and decentralized enforcement

来源：评论

学校读者我要写书评

暂无评论

Dynamic and risk-aware network access management 03

Dynamic and risk-aware network access management

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Teo, Lawrence Ahn, Gail-Joon Zheng, Yuliang LIISP Univ. of North Carolina at Charlotte 9201 University City Blvd Charlotte NC 28223 United States Calyptix Security Corporation P.O. Box 561508 Charlotte NC 28256 United States

ISBN: (纸本)9781581136814

Traditional network security technologies such as firewalls and intrusion detection systems usually work according to a static ruleset only. We believe that a better approach to network security can be achieved if we use quantified levels of risk as an input. In this paper, we describe a dynamic access control architecture which uses risk to determine whether to allow or deny access by a source connection into the network. A simulation of our architecture shows favorable and promising results.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Cryptographic access control in a distributed file system 03

Cryptographic access control in a distributed file system

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Harrington, Anthony Jensen, Christian Department of Computer Science Trinity College Dublin Dublin Ireland Info. and Mathematical Modelling Technical University of Denmark Denmark

ISBN: (纸本)9781581136814

Traditional access control mechanisms rely on a reference monitor to mediate access to protected resources. Reference monitors are inherently centralized and existing attempts to distribute the functionality of the reference monitor suffer from problems of scalability. Cryptographic access control is a new distributed access control paradigm designed for a global federation of information systems. It defines an implicit access control mechanism, which relies exclusively on cryptography to provide confidentiality and integrity of data managed by the system. It is particularly designed to operate in untrusted environments where the lack of global knowledge and control are defining characteristics. The proposed mechanism has been implemented in a distributed file system, which is presented in this paper along with a preliminary evaluation of the proposed mechanism.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Dynamic access control: Preserving safety and trust for network defense operations 03

Dynamic access control: Preserving safety and trust for netw...

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Naldurg, Prasad Campbell, Roy H. Department of Computer Science Univ. of Illinois Urbana Champaign Urbana IL 61801 United States

ISBN: (纸本)9781581136814

We investigate the cost of changing access control policies dynamically as a response action in computer network defense. We compare and contrast the use of access lists and capability lists in this regard, and develop a quantitative feel for the performance overheads and storage requirements. We also explore the issues related to preserving safety properties and trust assumptions during this process. We suggest augmentations to policy specifications that can guarantee these properties in spite of dynamic changes to system state. Using the lessons learned from this exercise, we apply these techniques in the design of dynamic access controls for dynamic environments.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Partial outsourcing: A new paradigm for access control 03

Partial outsourcing: A new paradigm for access control

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Abendroth, Joerg Jensen, Christian D. Distributed Systems Group Trinity College Dublin Poland Informatics and Math. Modelling Technical University of Denmark Denmark

ISBN: (纸本)9781581136814

Various security models have been proposed in recent years for different purposes. Each of these aims to ease administration by introducing new types of security policies and models. This increases the complexity a system administrator is faced with. Ultimately, the resources expended in choosing amongst all of these models leads to less efficient administration. In this paper, we propose a new access control paradigm, which is already well established in virus and SPAM protection as partial delegation of administration to external expertise centres. Well-known vulnerabilities can be filtered out and known sources of attacks can be automatically blocked. We describe how partial outsourcing can be achieved in a secure way. A framework, which enables this process has already been developed.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Specifying and enforcing constraints in role-based access control

Specifying and enforcing constraints in role-based access co...

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Crampton, Jason Information Security Group Royal Holloway University of London Egham TW20 0EX United Kingdom

Constraints in access control in general and separation of duty constraints in particular are an important area of research. There are two important issues relating to constraints: their specification and their enforcement. We believe that existing separation of duty specification schemes are rather complicated and that the few enforcement models that exist are unlikely to scale well. We examine the assumptions behind existing approaches to separation of duty and present a combined specification and implementation model for a class of constraints that includes separation of duty constraints. The specification model is set-based and has a simpler syntax than existing approaches. We discuss the enforcement of constraints and the relationship between static, dynamic and historical separation of duty constraints. Finally, we propose a model for a scalable role-based reference monitor, based on dynamic access control structures, that can be used to enforce constraints in an efficient manner.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

A stratification-based approach for handling conflicts in access control

A stratification-based approach for handling conflicts in ac...

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Benferhat, Salem El Baida, Rania Cuppens, Frédéric CRIL Universite d'Artois Rue Jean Souvraz SP 18 62307 Lens Cedex France IRIT Universite Paul Sabatier 118 Route de Narbonne 31062 Toulouse Cedex 4 France

In the health care sector, access to medical information is more and more electronically achieved. Therefore, it is very important to define security policies which restrict access to pieces of information in order to guarantee security properties like confidentiality or integrity properties. These security policies are not always free of conflicts, in particular in the presence of exceptional situations. This paper proposes tools for access control, based on the notion of roles, in the possibilistic logic framework. We first show how to formalize basic concepts of security policies. Then we present two approaches for dealing with conflicts based on a stratification of security policy's rules. Finally, an example of health care is presented.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

An administration concept for the enterprise role-based access control model

An administration concept for the enterprise role-based acce...

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Kern, Axel Schaad, Andreas Moffett, Jonathan Beta Systems Software AG Hermann-Heinrich-Gossen-Str. 3 50858 Köln Germany Department of Computer Science University of York York YO10 5DD United Kingdom

Using an underlying role-based model for the administration of roles has proved itself to be a successful approach. This paper sets out to describe the enterprise role-based access control model (ERBAC) in the context of SAM Jupiter, a commercial enterprise security management software. We provide an overview of the role-based conceptual model underlying SAM Jupiter. Having established this basis, we describe how the model is used to facilitate a role-based administration approach. In particular, we discuss our notion of 'scopes', which describe the objects over which an administrator has authority. The second part provides a case study based on our real-world experiences in the implementation of role-based administrative infrastructures. Finally, a critical evaluation and comparison with current approaches to administrative role-based access control is provided.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

An access control model for dynamic client-side content 03

An access control model for dynamic client-side content

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Hess, Adam Seamons, Kent E. Internet Security Research Lab Department of Computer Science Brigham Young University Provo UT 84602 United States

ISBN: (纸本)9781581136814

The focus of access control in client/server environments is on protecting sensitive server resources by determining whether or not a client is authorized to access those resources. The set of resources are usually static, and an access control policy associated with each resource specifies who is authorized to access the resource. In this paper, we turn the traditional client/server access control model on its head, and address how to protect the sensitive content that clients disclose to servers. Since client content is dynamically generated at runtime, the usual approach of associating a policy with the resource (content) a priori does not work. In this paper, we propose an access control model for protecting client-side content that is dynamically generated and disclosed at runtime. Our model identifies sensitive content, maps the sensitive content to an access control policy, and establishes the trustworthiness of the server before disclosing the sensitive content to the server. The model targets open systems, where clients and servers do not have preexisting trust relationships. We have implemented the model within TrustBuilder, an architecture for negotiating trust between strangers based on properties other than identity. The implementation is the first example of content-triggered trust negotiation and currently supports access control for sensitive content disclosed by web and email clients.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

The role control center: Features and case studies 03

The role control center: Features and case studies

引用

proceedings of eighth acm symposium on access control models and technologies

作者： Ferraiolo, David F. Ahn, Gail-Joon Chandramouli, R. Gavrila, Serban I. NIST 820 West Diamond Dr. Gaithersburg MD 20899 United States Univ. of NC at Charlotte 9801 University City Blvd. Charlotte NC 28223 United States VDG Inc. 6009 Brookside Dr. Chevy Chase MD 20815 United States

ISBN: (纸本)9781581136814

Role-based access control (RBAC) models have been implemented not only in self-contained resource management products such as DBMSs and Operating Systems but also in a class of products called Enterprise Security Management Systems (ESMS). ESMS products are used for centralized management of authorizations for resources resident in several heterogeneous systems (called target systems) distributed throughout the enterprise. The RBAC model used in an ESMS is called the Enterprise RBAC model (ERBAC). An ERBAC model can be used to specify not only sophisticated access requirements centrally for resources resident in several target systems, but also administrative data required to map those defined access requirements to the access control structures native to the target platforms. However, the ERBAC model (i.e., the RBAC implementation) supported in many commercial ESMS products has not taken full advantage of policy specification capabilities of RBAC. In this paper we describe an implementation of ESMS called the 'Role control Center' (RCC) that supports an ERBAC model that includes features such as general role hierarchy, static separation of duty constraints, and an advanced permission review facility (as defined in NIST's proposed RBAC standard). We outline the various modules in the RCC architecture and describe how they collectively provide support for authorization administration tasks at the enterprise and target-system levels.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 37 38 39 40 41 42 43 44 45 46 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：