检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

452 篇 会议
6 篇 期刊文献

馆藏范围

458 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

380 篇 工学
- 378 篇 计算机科学与技术...
- 188 篇 软件工程
- 78 篇 控制科学与工程
- 25 篇 信息与通信工程
- 23 篇 电气工程
- 8 篇 安全科学与工程
- 4 篇 材料科学与工程（可...
- 3 篇 力学（可授工学、理...
- 2 篇 化学工程与技术
- 2 篇 交通运输工程
- 2 篇 生物工程
- 2 篇 网络空间安全
- 1 篇 机械工程
- 1 篇 光学工程
- 1 篇 冶金工程
- 1 篇 动力工程及工程热...
52 篇 管理学
- 44 篇 图书情报与档案管...
- 18 篇 管理科学与工程(可...
- 12 篇 工商管理
31 篇 理学
- 29 篇 数学
- 5 篇 统计学（可授理学、...
- 2 篇 生物学
- 1 篇 化学
11 篇 法学
- 9 篇 社会学
- 2 篇 法学
4 篇 医学
- 4 篇 基础医学(可授医学...
- 4 篇 临床医学
- 4 篇 公共卫生与预防医...
3 篇 经济学
- 3 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

161 篇 access control
35 篇 security of data
20 篇 security
17 篇 rbac
17 篇 privacy
15 篇 attribute-based ...
15 篇 authorization
14 篇 role-based acces...
12 篇 internet of thin...
12 篇 xacml
10 篇 relationship-bas...
10 篇 usage control
9 篇 abac
9 篇 policy mining
8 篇 xml
8 篇 control system a...
6 篇 role engineering
6 篇 attributes
5 篇 role based acces...
4 篇 delegation

机构

10 篇 purdue univ w la...
6 篇 purdue universit...
6 篇 eindhoven univ t...
6 篇 suny albany alba...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 suny stony brook...
4 篇 iit kharagpur kh...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 eindhoven univer...
3 篇 university of pi...
3 篇 univ calgary cal...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 rutgers state un...
3 篇 national institu...
3 篇 karlsruhe inst t...

作者

23 篇 bertino elisa
16 篇 sandhu ravi
14 篇 ahn gail-joon
10 篇 crampton jason
10 篇 lobo jorge
9 篇 li ninghui
9 篇 ray indrakshi
8 篇 zannone nicola
8 篇 hu hongxin
8 篇 jaeger trent
7 篇 vaidya jaideep
7 篇 elisa bertino
7 篇 ferrari elena
7 篇 xu dianxiang
7 篇 iyer padmavathi
6 篇 gupta maanak
6 篇 masoumzadeh amir...
6 篇 schaad andreas
6 篇 tripunitara mahe...
6 篇 ranise silvio

语言

457 篇 英文
1 篇 其他

检索条件"任意字段=Proceedings of Eighth ACM Symposium on Access Control Models and Technologies"

共 458 条记录，以下是61-70 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Demo: Attribute-Stream-Based access control (ASBAC) with the Streaming Attribute Policy Language (SAPL) 21

Demo: Attribute-Stream-Based Access Control (ASBAC) with the...

引用

26th acm symposium on access control models and technologies (SacmAT)

作者： Heutelbeck, Dominic FTK Forschungsinst Telekommunikat & Kooperat eV Dortmund Nrw Germany

ISBN: (纸本)9781450383653

Traditional Attribute-Based access control (ABAC) implementations are based on a request-response protocol resulting in one decision for one authorization request. In stateful, session-based applications this may lead to polling the policy decision point (PDP) and policy information points (PIPs) referenced by policies. This leads to the well-known trade-offs between polling frequency and latency of updates becoming known to the client. Attribute-Stream-based access control (ASBAC) is an authorization model employing a publish-subscribe pattern protocol where a single subscription results in a stream of decisions dynamically updating based on the streams of changing attribute values, streams of changing policies, and PDP configuration. This demonstration will show the basic architecture of ASBAC based systems, show how the model is implemented by the Streaming Attribute Policy Language (SAPL) and its engine. The SAPL engine is available as Open Source for security researchers and practitioners. First, the overall architecture of the engine will be introduced, followed by a short demo of the publish-subscribe protocol. Afterward, several key features of SAPL are demonstrated in an authoring and administration environment. Next, a full-stack web application employing SAPL is demonstrated, showing how Policy Enforcement Points (PEPs) are established. The demonstration concludes with a demo of the SAPL tools for testing policies and calculating test metrics on policies.

关键词： access control data structures policy languages attribute-based access control data streams

来源：评论

学校读者我要写书评

暂无评论

Expressive Bilateral access control for Internet-of-Things in Cloud-Fog Computing 21

Expressive Bilateral Access Control for Internet-of-Things i...

引用

26th acm symposium on access control models and technologies (SacmAT)

作者： Xu, Shengmin Ning, Jianting Ma, Jinhua Huang, Xinyi Pang, Hwee Hwa Deng, Robert H. Fujian Normal Univ Fuzhou Fujian Peoples R China Singapore Management Univ Singapore Singapore Chinese Acad Sci State Key Lab Informat Secur Inst Informat Engn Beijing 100093 Peoples R China

ISBN: (纸本)9781450383653

As a versatile system architecture, cloud-fog Internet-of-Things (IoT) enables multiple resource-constrained devices to communicate and collaborate with each other. By outsourcing local data and immigrating expensive workloads to cloud service providers and fog nodes (FNs), resource-constrained devices can enjoy data services with low latency and minimal cost. To protect data security and privacy in the untrusted cloud-fog environment, many cryptographic mechanisms have been invented. Unfortunately, most of them are impractical when directly applied to cloud-fog IoT computing, mainly due to the large number of resource-constrained end-devices (EDs). In this paper, we present a secure cloud-fog IoT data sharing system with bilateral access control based on a new cryptographic tool called lightweight matchmaking encryption. Our system enforces both sender access control and receiver access control simultaneously and adapts to resource-constrained EDs by outsourcing costly workloads to FNs. We conduct extensive experiments to demonstrate the superior performance of our system to the most relevant solutions in the literature.

关键词： Internet-of-Things Bilateral access control Cloud-Fog Computing

来源：评论

学校读者我要写书评

暂无评论

Can I Reach You? Do I Need To? New Semantics in Security Policy Specification and Testing 21

Can I Reach You? Do I Need To? New Semantics in Security Pol...

引用

26th acm symposium on access control models and technologies (SacmAT)

作者： Katsis, Charalampos Cicala, Fabrizio Thomsen, Dan Ringo, Nathan Bertino, Elisa Purdue Univ W Lafayette IN 47907 USA SIFT LLC Minneapolis MN USA

ISBN: (纸本)9781450383653

The zero trust principle only allows authorized and authenticated actions in a computer network. A network policy satisfies the least privilege principle by minimizing the network permissions to only those needed by users and applications. However, administrators face many challenges in creating a least privilege policy since it requires a detailed understanding of the network topology and knowing the communication requirements of every network application and user. This paper addresses those challenges by introducing a graph-based policy specification framework to capture a network's communication requirements and a network compiler that turns those requirements into an enforceable policy. To offset the effort of building such a stringent policy, we incorporate patterns to spread the work of policy creation over time and people. In the paper, we first elaborate on how our framework's semantics enhances network security and resilience. We then introduce a Security Policy Regression Testing tool (SPRT), which leverages our framework's semantics, to test and reason about consistency, correctness, and relevance of network security policies. Finally, we outline relevant research directions.

关键词： Security policy enforcement testing access control network security zero trust least privilege policy

来源：评论

学校读者我要写书评

暂无评论

Network (In)security: Leniency in Protocols' Design, Code and Configuration 22

Network (In)security: Leniency in Protocols' Design, Code an...

引用

27th acm symposium on access control models and technologies (SacmAT)

作者： Hoque, Endadul Syracuse Univ Syracuse NY 13210 USA

ISBN: (纸本)9781450393577

Protocols are one of the founding pillars of network communication. Given their importance, protocols have received great attention not only from the research community but also from adversaries. Protocols, particularly their implementations, have been lucrative targets for adversarial attacks to induce network insecurity by compromising the guarantees that these implementations should provide. Most of these attacks can be traced back to the leniency in their design, code, or configuration. Finding leniency in implementations is challenging as these lenient instances are primarily tied to the semantics of the protocol and thus demand for techniques unlike existing approaches that we use for finding low-level memory corruption *** this talk, I will discuss our experience and lesson learned in detecting leniency in different layers of the TCP/IP network protocol stack. First, I will show how leniency in the design of loss-based TCP congestion control schemes can be exploited by an attacker to manipulate the victim into taking actions favorable for the attacker. I will introduce our model-guided fuzzing approach to find such manipulation attacks in different TCP implementations part of mainstream operating systems (e.g., Linux, Windows). Next, I will focus on leniency in code, where an implementation exhibits noncompliance with its design. Specifically, I will talk about how lenient implementations of X.509 certificate validation in SSL/TLS libraries can be exploited by an attacker to mount impersonation attacks. Finally, I will highlight that it is not always the protocol's design or code, sometimes it is humans: the users and/or the IT (Information Technology) administrators. Specifically, I will present our multifaceted measurement study where we examined the WPA2-Enterprise Wi-Fi configurations prescribed in tertiary education institutes (TEIs) around the world. I will share our findings about the widespread insecure practices that can leave users of these inst

关键词： Implementation bugs TCP Congestion control Fuzzing Symbolic execution Authentication PKI X.509 Certificate

来源：评论

学校读者我要写书评

暂无评论

Towards Activity-Centric access control for Smart Collaborative Ecosystems 21

Towards Activity-Centric Access Control for Smart Collaborat...

引用

26th acm symposium on access control models and technologies (SacmAT)

作者： Gupta, Maanak Sandhu, Ravi Tennessee Technol Univ Dept Comp Sci Cookeville TN 38505 USA Univ Texas San Antonio Inst Cyber Secur San Antonio TX USA Univ Texas San Antonio NSF C SPECC Ctr Dept Comp Sci San Antonio TX USA

ISBN: (纸本)9781450383653

The ubiquitous presence of smart devices along with advancements in connectivity coupled with the elastic capabilities of cloud and edge systems have nurtured and revolutionized smart ecosystems. Intelligent, integrated cyber-physical systems offer increased productivity, safety, efficiency, speed and support for data driven applications beyond imagination just a decade ago. Since several connected devices work together as a coordinated unit to ensure efficiency and automation, the individual operations they perform are often reliant on each other. Therefore, it is important to control what functions or activities different devices can perform at a particular moment of time, and how they are related to each other. It is also important to consider additional factors such as conditions, obligation or mutability of activities, which are critical in deciding whether or not a device can perform a requested activity. In this paper, we take an initial step to propose and discuss the concept of Activity-Centric access control (ACAC) for smart and connected ecosystem. We discuss the notion of activity with respect to the collaborative and distributed yet integrated systems and identify the different entities involved along with the important factors to make an activity control decision. We outline a preliminary approach for defining activity control expressions which can be applied to different smart objects in the system. The main goal of this paper is to present the vision and need for the activity-centric approach for access control in connected smart systems, and foster discussion on the identified future research agenda.

关键词： Smart Connected Ecosystems Security and Privacy Activity-Centric access control IoT Collaborative Systems

来源：评论

学校读者我要写书评

暂无评论

SCIFFS: Enabling Secure Third-Party Security Analytics using Serverless Computing 21

SCIFFS: Enabling Secure Third-Party Security Analytics using...

引用

26th acm symposium on access control models and technologies (SacmAT)

作者： Polinsky, Isaac Datta, Pubali Bates, Adam Enck, William N Carolina State Univ Raleigh NC 27695 USA Univ Illinois Champaign IL USA

ISBN: (纸本)9781450383653

Third-party security analytics allow companies to outsource threat monitoring tasks to teams of experts and avoid the costs of in-house security operations centers. By analyzing telemetry data from many clients these services are able to offer enhanced insights, identifying global trends and spotting threats before they reach most customers. Unfortunately, the aggregation that drives these insights simultaneously risks exposing sensitive client data if it is not properly sanitized and tracked. In this work, we present SCIFFS, an automated information flow monitoring framework for preventing sensitive data exposure in third-party security analytics platforms. SCIFFS performs decentralized information flow control over customer data in a serverless setting, leveraging the innate polyinstantiated nature of serverless functions to assure precise and lightweight tracking of data flows. Evaluating SCIFFS against a proof-of-concept security analytics framework on the widely-used OpenFaaS platform, we demonstrate that our solution supports common analyst workflows (data ingestion, custom dashboards, threat hunting) while imposing just 3.87% runtime overhead on event ingestion and the overhead on aggregation queries grows linearly with the number of records in the database (e.g., 18.75% for 50,000 records and 104.27% for 500,000 records) as compared to an insecure baseline. Thus, SCIFFS not only establishes a privacy-respecting model for third-party security analytics, but also highlights the opportunities for security-sensitive applications in the serverless computing model.

关键词： Serverless Computing Security Analytics Decentralized Information Flow control

来源：评论

学校读者我要写书评

暂无评论

DICE: Dynamic In-Situ control for Edge-based Applications 23

DICE: Dynamic In-Situ Control for Edge-based Applications

引用

proceedings of the eighth acm/IEEE symposium on Edge Computing

作者： Yongtao Yao Liping Julia Zhu Weisong Shi Computer & Information Sciences/The CAR Lab University of Delaware Newark Delaware USA Meta Platforms Inc. Menlo Park California USA

ISBN: (纸本)9798400701238

This paper focuses on addressing computational constraints and energy limitations prevalent in edge-based applications through an innovative approach, dynamic in-situ control for edge-based applications (DICE). DICE capitalizes on the burgeoning trend in vehicle sensor technologies, such as camera, Radar, and LiDAR, which are becoming increasingly powerful and capable of performing pre-processing computations. DICE introduces a concept of "downstream offloading", which distinguishes it from traditional offloading approaches that typically offload computational tasks from edge devices to more powerful Edge Servers. In contrast, DICE offloads part of the computational tasks from the Edge Server to the sensor itself, thereby optimizing data processing at the source and reducing the volume of data transmission required. This approach not only addresses the latency bottleneck frequently encountered in energy-intensive neural networks but also enhances the efficiency of data processing by selectively filtering out non-critical frames based on event-triggering mechanisms. DICE leverages the unique strengths of portable devices such as smartwatches and smartphones, even with their inherent computational and power limitations. The framework consists of an adaptive control layer for dynamic task allocation and an application layer designed to deploy quantized models on System on Chips (SoCs) like TinyML, thereby improving the efficiency of AI-driven applications while conservatively utilizing energy. This system proposes a sustainable, energy-efficient pathway for future edge-based applications.

关键词： smart sensor

来源：评论

学校读者我要写书评

暂无评论

Declarative access control for Aggregations of Multiple Ownership Data 20

Declarative Access Control for Aggregations of Multiple Owne...

引用

25th acm symposium on access control models and technologies (SacmAT)

作者： Rosa, Marco Di Cerbo, Francesco Lozoya, Rocio Cabrera SAP Secur Res Sophia Antipolis France Univ Bergamo Sophia Antipolis France

ISBN: (纸本)9781450375689

Data aggregation operations are popular in domains like data analytics, machine learning and artificial intelligence. However, despite the availability of information, situations like fragmented ownership and legal frameworks hinder data processing, requiring companies to design complex human-driven processes in order to gather, aggregate, and process data in a compliant way. Our proposal addresses this lack of automation with an access control mechanism extending XacmL, an access control standard with language and implementation, to regulate operations with multiple data policies.

关键词： access control Data Aggregation Authorization Policies

来源：评论

学校读者我要写书评

暂无评论

Deploying access control Enforcement for IoT in the Cloud-Edge Continuum with the help of the CAP Theorem 20

Deploying Access Control Enforcement for IoT in the Cloud-Ed...

引用

25th acm symposium on access control models and technologies (SacmAT)

作者： Ahmad, Tahir Morelli, Umberto Ranise, Silvio FBK ICT Secur & Trust Unit Trento Italy Univ Genoa DIBRIS Genoa Italy

ISBN: (纸本)9781450375689

The CAP Theorem is used by distributed system practitioners to investigate the necessary trade-offs in the design and development of distributed systems, mainly databases and web applications. In this paper, we use it to reason about access control systems designed for the Internet of Things (IoT). We validate our approach by experimentally investigating alternative architectural designs to enforce access control in a smart lock system using the cloud-edge IoT platform offered by Amazon Web Services. We discuss the trade-off between security and performance that may help IoT designers choose the most suitable architecture supporting their requirements.

关键词： access control Internet of Things CAP Theorem

来源：评论

学校读者我要写书评

暂无评论

Active Learning of Relationship-Based access control Policies 20

Active Learning of Relationship-Based Access Control Policie...

引用

25th acm symposium on access control models and technologies (SacmAT)

作者： Iyer, Padmavathi Masoumzadeh, Amirreza SUNY Albany Albany NY 12222 USA

ISBN: (纸本)9781450375689

Understanding access control policies is essential in understanding the security behavior of systems. However, often times, a complete and accurate specification of the enforced access control policy in a system is not available. In fact, scale and complexity of a system, or unavailability of its source code, may prevent users and even its developers from having access to such accurate specification. In this paper, we propose a novel, systematic approach for learning access control policies where target systems are treated as black boxes. In particular, we show how we can construct a deterministic finite automaton (DFA) characterizing the relationship-based access control (ReBAC) policy of a system by interacting with its access control engine using minimal number of access requests. Our experiments on realistic application scenarios and their promising results demonstrate the feasibility, scalability and efficiency of our learning approach.

关键词： relationship-based access control authorization black box model learning active learning

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共46页 << < 3 4 5 6 7 8 9 10 11 12 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：