检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

48 篇 会议

馆藏范围

48 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

39 篇 工学
- 39 篇 计算机科学与技术...
- 38 篇 软件工程
- 6 篇 信息与通信工程
- 5 篇 控制科学与工程
- 1 篇 航空宇航科学与技...
18 篇 管理学
- 16 篇 图书情报与档案管...
- 9 篇 管理科学与工程(可...
- 8 篇 工商管理
12 篇 理学
- 12 篇 数学
- 2 篇 统计学（可授理学、...
3 篇 法学
- 2 篇 社会学
- 1 篇 法学
2 篇 医学
- 2 篇 基础医学(可授医学...
- 2 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 经济学
- 1 篇 应用经济学

主题

23 篇 security of data
7 篇 access control
3 篇 xml
1 篇 policy languages
1 篇 role-based acces...
1 篇 public key crypt...
1 篇 rbac
1 篇 role administrat...
1 篇 high level langu...
1 篇 delegation
1 篇 revocation
1 篇 role hierarchy
1 篇 healthcare infor...
1 篇 redundancy
1 篇 hierarchy
1 篇 role engineering
1 篇 digital credenti...
1 篇 privilege manage...
1 篇 scenarios
1 篇 temporal constra...

机构

2 篇 george mason uni...
1 篇 nai labs network...
1 篇 school of inform...
1 篇 ibm res zurich
1 篇 university of so...
1 篇 university of yo...
1 篇 cerias computer ...
1 篇 department of co...
1 篇 informatik iii u...
1 篇 purdue universit...
1 篇 eindhoven univer...
1 篇 western ontario
1 篇 univ. of nc at c...
1 篇 info. and mathem...
1 篇 nai labs network...
1 篇 dibris u. of gen...
1 篇 nato communicati...
1 篇 department of el...
1 篇 university of ca...
1 篇 beta systems sof...

作者

2 篇 schaad andreas
2 篇 elisa bertino
2 篇 ray indrakshi
2 篇 sandhu ravi
2 篇 park jaehong
2 篇 ahn gail-joon
2 篇 ravi sandhu
1 篇 gustaf neumann
1 篇 wilikens marc
1 篇 hess adam
1 篇 harrington antho...
1 篇 magri eros
1 篇 ao xuhui
1 篇 minsky naftaly h...
1 篇 parisi-presicce ...
1 篇 zannone nicola
1 篇 fundulaki irini
1 篇 park joon s.
1 篇 marx maarten
1 篇 grasso matteo

语言

48 篇 英文

检索条件"任意字段=Proceedings of Seventh ACM Symposium on Access Control Models and Technologies: SACMAT 2002"

共 48 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Towards a credential-based implementation of compound access control policies 04

Towards a credential-based implementation of compound access...

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Biskup, Joachim Wortmann, Sandra Information System and Security University of Dortmund Germany

ISBN: (纸本)9781581138726

We describe a layered approach to access control for distributed and interoperable computing systems. Firstly, compound access control policies are conceptually specified, using the policy algebra proposed by Bonatti, Capitani di Vimercati and Samarati. Secondly, SPKI/SDSI is exploited to implement and to enforce a policy specification by means of credentials. Therefore, SPKI/SDSI is slightly extended, in particular in order to allow algebra expressions over local names as subjects in authorisation certificates and to deal with the subtraction operator of the algebra. Besides presenting the overall approach, the paper elaborates some details for a still powerful fraction of the policy algebra, thereby examining the correctness of the credential-based implementation.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Using trust and risk in role-based access control policies 04

Using trust and risk in role-based access control policies

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Dimmock, Nathan Belokosztolszki, András Eyers, David Bacon, Jean Moody, Ken University of Cambridge Computer Laboratory JJ Thomson Avenue Cambridge CB3 0FD United Kingdom

ISBN: (纸本)9781581138726

Emerging trust and risk management systems provide a framework for principals to determine whether they will exchange resources, without requiring a complete definition of their credentials and intentions, Most distributed access control architectures have far more rigid policy rules, yet in many respects aim to solve a similar problem. This paper elucidates the similarities between trust management and distributed access control systems by demonstrating how the OASIS access control system and its role-based policy language can be extended to make decisions on the basis of trust and risk analyses rather than on the basis of credentials alone. We apply our new model to the prototypical example of a file storage and publication service for the Grid, and test it using our Prolog-based OASIS implementation.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Using UML to visualize role-based access control constraints 04

Using UML to visualize role-based access control constraints

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Ray, Indrakshi Li, Na France, Robert Kim, Dae-Kyoo Computer Science Dept. Colorado State University Fort Collins CO 80523 United States

ISBN: (纸本)9781581138726

Organizations use Role-Based access control (RBAC) to protect information resources from unauthorized access. We propose an approach, based on the Unified Modeling Language (UML), that shows how RBAC policies can be systematically incorporated into an application design. We consider an RBAC model to be a pattern which we express using UML diagram templates;RBAC policies for an application conforming to this model can be generated by instantiating these templates with values obtained from the application. The constraints of the RBAC model are expressed using the Object Constraint Language (OCL). OCL constraints, based on first-order logic, are difficult to understand. To alleviate this problem, we show how violation of such constraints can be visually represented using object diagram templates. With adequate tool support, developers can use these to demonstrate constraint violations in their applications. Our approach is illustrated using a small banking application.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

A logical specification for usage control 04

A logical specification for usage control

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Zhang, Xinwen Park, Jaehong Parisi-Presicce, Francesco Sandhu, Ravi George Mason University United States George Mason University NSD Security United States

ISBN: (纸本)9781581138726

Recently presented usage control (UCON) has been considered as the next generation access control model with distinguishing properties of decision continuity and attribute mutability. A usage control decision is determined by combining authorizations, obligations, and conditions, presented as UCON ABC core models by Park and Sandhu. Based on these core aspects, we develop a first-order logic specification of UCON with Lamport's temporal logic of actions (TLA). The building blocks of this model include: (1) a sequence of states expressed by attributes of subjects, objects, and the system, (2) state predicates on subject and object attributes, (3) pre-defined authorization actions performed by the security system and subjects, (4) obligation actions, and (5) condition predicates on system attributes. For a UCON model we define a set of temporal logic formulas that hold as usage control policies. We show the flexibility and expressive capability of this logic model by specifying the new features and core models of UCON.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

X-GTRBAC admin: A decentralized administration model for enterprise wide access control

X-GTRBAC admin: A decentralized administration model for ent...

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Bhatti, Rafae Joshi, James B.D. Bertino, Elisa Ghafoor, Arif Sch. of Elec./Computer Engineering Purdue University West Lafayette IN United States School of Information Sciences University of Pittsburgh Pittsburgh PA United States Department of Computer Sciences CERIAS Purdue University West Lafayette IN United States

access control in enterprises is a key research area in the realm of Computer Security because of the unique needs of the target enterprise. As the enterprise typically has large user and resource pools, administering the access control based on any framework could in itself be a daunting task. This work presents X-GTRBAC Admin, an administration model that aims at enabling policy administration within a large enterprise. In particular, it simplifies the process of user-to-role and permission-to-role assignments, and thus allows decentralization of the policy administration tasks. Secondly, it also allows for specifying the domain of authority of the system administrators, and hence provides mechanism to distribute the administrative authority over multiple domains within the enterprise. The paper also illustrates the applicability of the administrative concepts presented in our framework for enterprise-wide access control.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Implementing access control to people location information 04

Implementing access control to people location information

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Hengartner, Urs Steenkiste, Peter Department of Computer Science Carnegie Mellon University United States Department of Electrical Engineering Carnegie Mellon University United States

ISBN: (纸本)9781581138726

Ubiquitous computing uses a variety of information for which access needs to be controlled. For instance, a person's current location is a sensitive piece of information, which only authorized entities should be able to learn. Several challenges arise in the specification and implementation of policies controlling access to location information. For example, there can be multiple sources of location information, the sources can be within different administrative do-mains, different administrative domains might allow different entities to specify policies, and policies need to be flexible. We address these issues in our design of an access control mechanism for a people location system. Our design encodes policies as digital certificates. We present an example implementation based on SPKI/SDSI certificates. Using measurements, we quantify the influence of access control on query processing time. We also discuss trade-offs between RSA-based and DSA-based signature schemes for digital certificates.

关键词： Wireless telecommunication systems

来源：评论

学校读者我要写书评

暂无评论

On the role of roles: From role-based to role-sensitive access control

On the role of roles: From role-based to role-sensitive acce...

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Ao, Xuhui Minsky, Naftaly H. Department of Computer Science Rutgers University Piscataway NJ 08854 United States

This paper maintains that for an access-control (AC) mechanism to support a wide range of policies, it is best to dispense with any built-in semantics for roles in the mechanism itself1-be it the semantics of RBAC, or any other-leaving such semantics to be defined by particular policies. In other words, an AC mechanism should be sensitive to roles, allowing specific policies to take roles into account for their authorization decisions. But it should not be based on any particular interpretation of the structure of roles, or of their effect on access control. The validity of this assertion is demonstrated by showing that a mechanism called Law-governed interaction (LGI), which has no built-in concept of roles, can nevertheless support a wide range of policies that take roles into account. These include RBAC itself, its various generalizations, as well as concepts like budgetary controls, which seems to be quite inconsistent with RBAC. All such policies can be formulated, deployed, and enforced, via a single scalable, and fully implemented LGI mechanism.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Specifying access control policies for XML documents with XPath 04

Specifying access control policies for XML documents with XP...

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Fundulaki, Irini Marx, Maarten Network Data Department Bell Labs. Research United States Lang. and Inference Technology Group University of Amsterdam Netherlands

ISBN: (纸本)9781581138726

access control for XML documents is a non-trivial topic, as can be witnessed from the number of approaches presented in the literature. Trying to compare these, we discovered the need for a simple, clear and unambiguous language to state the declarative semantics of an access control policy. All current approaches state the semantics in natural language, which has none of the above properties. This makes it hard to assess whether the proposed algorithms are correct (i.e., really implement the described semantics). It is also hard to assess the proposed policy on its merits, and to compare it to others (for file systems for instance). This paper shows how XPath can be used to specify the semantics of an access control policy for XML documents. Using XPath has great advantages: it is standard technology, widely used and it has clear and easy syntax and semantics. We use the developed framework to give a formal specification of the five most prominent approaches of access control for XML documents from the literature.

关键词： XML

来源：评论

学校读者我要写书评

暂无评论

Security analysis in role-based access control 04

Security analysis in role-based access control

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Li, Ninghui Tripunitara, Mahesh V. Ctr. Educ./Res. Info. Assur./Secty. Department of Computer Sciences Purdue University 656 Oval Drive West Lafayette IN 47907 United States

ISBN: (纸本)9781581138726

Delegation is often used in administrative models for Role-Based access control (RBAC) systems to decentralize administration tasks. While the use of delegation greatly enhances flexibility and scalability, it may reduce the control that an organization has over its resources, thereby diminishing a major advantage RBAC has over Discretionary access control (DAC). We propose to use security analysis techniques to maintain desirable security properties while delegating administrative privileges. We give a precise definition of a family of security analysis problems in RBAC, which is more general than safety analysis that is studied in the literature. We also show that two classes of problems in the family can be reduced to similar analysis in the RT0 trust-management language, thereby establishing an interesting relationship between RBAC and the RT (Role-based Trust-management) framework. The reduction gives efficient algorithms for answering most kinds of queries in these two classes and establishes the complexity bounds for the intractable cases.

关键词： Security of data

来源：评论

学校读者我要写书评

暂无评论

Succinct specifications of portable document access policies 04

Succinct specifications of portable document access policies

引用

proceedings on the Ninth acm symposium on access control models and technologies, sacmat 2004

作者： Bykova, Marina Atallah, Mikhail CERIAS Computer Sciences Department Purdue University United States

ISBN: (纸本)9781581138726

When customers need to each be given portable access rights to a subset of documents from a large universe of n available documents, it is often the case that the space available for representing each customer's access rights is limited to much less than n, say it is no more than m bits. This is the case when, e.g., limited-capacity inexpensive cards are used to store the access rights to huge multimedia document databases. How does one represent subsets of a huge set of n elements, when only m bits are available and m is much smaller than n? We use an approach reminiscent of Bloom filters, by assigning to each document a subset of the m bits: If that document is in a customer's subset then we set the corresponding bits to 1 on the customer's card. This guarantees that each customer gets the documents he paid for, but it also gives him access to documents he did not pay for ("false positives"). We want to do so in a manner that minimizes the expected total false positives under various deterministic and probabilistic models: In the former model we assume k customers whose respective subsets are known a priori, whereas in the latter we assume (more realistically) that each document has a probability of being included in a customer's subset. We cannot use randomly assigned bits for each document (in the way Bloom filters do), rather we need to consider the a priori knowledge (deterministic or probabilistic) we are given in each model in order to better assign a subset of the m available bits to each of the n documents. We analyze and give efficient schemes for this problem.

关键词： Computer software portability

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：