检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

375 篇 会议
6 篇 期刊文献

馆藏范围

381 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

332 篇 工学
- 324 篇 计算机科学与技术...
- 146 篇 软件工程
- 72 篇 控制科学与工程
- 25 篇 信息与通信工程
- 14 篇 电气工程
- 9 篇 安全科学与工程
- 3 篇 机械工程
- 3 篇 交通运输工程
- 3 篇 生物工程
- 2 篇 力学（可授工学、理...
- 2 篇 光学工程
- 2 篇 材料科学与工程（可...
- 2 篇 电子科学与技术（可...
- 2 篇 建筑学
- 2 篇 土木工程
- 2 篇 化学工程与技术
- 2 篇 生物医学工程（可授...
- 2 篇 网络空间安全
35 篇 管理学
- 28 篇 图书情报与档案管...
- 12 篇 管理科学与工程(可...
- 3 篇 工商管理
18 篇 理学
- 15 篇 数学
- 5 篇 统计学（可授理学、...
- 3 篇 生物学
9 篇 法学
- 9 篇 社会学
3 篇 医学
- 3 篇 基础医学(可授医学...
- 3 篇 临床医学
- 2 篇 公共卫生与预防医...
2 篇 经济学
- 2 篇 应用经济学
1 篇 教育学
- 1 篇 教育学

主题

138 篇 access control
15 篇 rbac
14 篇 privacy
14 篇 authorization
12 篇 security
11 篇 attribute-based ...
10 篇 relationship-bas...
9 篇 xacml
9 篇 usage control
8 篇 internet of thin...
8 篇 role-based acces...
8 篇 control system a...
7 篇 abac
6 篇 policy mining
5 篇 attributes
4 篇 xml
4 篇 information flow...
4 篇 policy enforceme...
4 篇 activity-centric...
4 篇 access control m...

机构

7 篇 purdue univ w la...
5 篇 suny stony brook...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 arizona state un...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 purdue univ dept...
3 篇 univ waterloo wa...
3 篇 department of co...
3 篇 univ kent sch co...
3 篇 swiss fed inst t...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 iit kharagpur kh...
2 篇 univ trento dept...
2 篇 univ. of texas d...
2 篇 peking univ peop...

作者

16 篇 bertino elisa
11 篇 sandhu ravi
11 篇 ahn gail-joon
10 篇 lobo jorge
8 篇 li ninghui
7 篇 crampton jason
7 篇 ray indrakshi
6 篇 zannone nicola
6 篇 vaidya jaideep
6 篇 hu hongxin
6 篇 tripunitara mahe...
6 篇 stoller scott d.
6 篇 iyer padmavathi
5 篇 gupta maanak
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 molloy ian
5 篇 kerschbaum flori...
5 篇 ranise silvio
5 篇 armando alessand...

语言

379 篇 英文
1 篇 葡萄牙文
1 篇 其他

检索条件"任意字段=Proceedings of the 17th ACM symposium on Access Control Models and Technologies"

共 381 条记录，以下是21-30 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Pairing Human and Artificial Intelligence: Enforcing access control Policies with LLMs and Formal Specifications 29

Pairing Human and Artificial Intelligence: Enforcing Access ...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Rubio-Medrano, Carlos E. Kotak, Akash Wang, Wenlu Sohr, Karsten Texas A&M Univ Corpus Christi Corpus Christi TX USA Univ Bremen Bremen Germany

ISBN: (纸本)9798400704918

Large Language models (LLMs), such as ChatGPT and Google Bard, have performed interestingly well when assisting developers on computer programming tasks, a.k.a., coding, thus potentially resulting in convenient and faster software constructions. this new approach significantly enhances efficiency but also presents challenges in unsupervised code construction with limited security guarantees. LLMs excel in producing code with accurate grammar, yet they are not specifically trained to guarantee the security of the code. In this paper, we provide an initial exploration into using formal software specifications as a starting point for software construction, allowing developers to translate descriptions of security-related behavior into natural language instructions for LLMs, a.k.a., prompts. In addition, we leveraged automated verification tools to evaluate the code produced against the aforementioned specifications, following a modular, step-by-step software construction process. For our study, we leveraged Role-based access control (RBAC), a mature security model, and the Java Modeling Language ( JML), a behavioral specification language for Java. We test our approach on different publicly-available LLMs, namely, OpenAI ChatGPT 4.0, Google Bard, and Microsoft CoPilot. We provide a description of two applications-a security-sensitive Banking application employing RBAC and an RBAC API module itself-, the corresponding JML specifications, as well as a description of the prompts, the generated code, the verification results, as well as a series of interesting insights for practitioners interested in further exploring the use of LLMs for securely constructing applications.

关键词： Large Language models ChatGPT Prompt Engineering Formal Specifications Software Construction. Java Modeling Language

来源：评论

学校读者我要写书评

暂无评论

the Hardness of Learning access control Policies 23

The Hardness of Learning Access Control Policies

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Lei, Xiaomeng Tripunitara, Mahesh Univ Waterloo Waterloo ON Canada

ISBN: (纸本)9798400701733

the problem of learning access control policies is receiving increasing attention in research. We contribute to the foundations of this problem by posing and addressing meaningful questions on computational hardness. Our work addresses learning access control policies in the context of three different models from the literature: the access matrix, and Role- and Relationship-Based access control (RBAC and ReBAC, respectively). Our underlying theory is the well-established notion of Probably Approximately Correct (PAC), with careful extensions for our setting. the data, or examples, a learning algorithm is provided in our setup is that related to access enforcement, which is the process by which a request for access to a resource is decided. For the access matrix, we pose a learning problem that turns out to be computationally easy, and another that we prove is computationally hard. We generalize the former result so we have a sufficient condition for establishing other problems to be computationally easy. With these results as the basis, we consider five learning problems in the context of RBAC, two of which turn out to be computationally hard. Finally, we consider four learning problems in the context of ReBAC, all of which turn out to be computationally easy. Every proof for a problem that is computationally easy is constructive, in that we propose a learning algorithm for the problem that is efficient, and probably, approximately correct. As such, our work makes contributions at the foundations of an important, emerging aspect of access control, and thereby, information security.

关键词： Probably approximately correct Computational hardness

来源：评论

学校读者我要写书评

暂无评论

Circles of Trust: A Voice-Based Authorization Scheme for Securing IoT Smart Homes 29

Circles of Trust: A Voice-Based Authorization Scheme for Sec...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Mondragon, Jennifer Cruz, Gael Shastri, Dvijesh Rubio-Medrano, Carlos E. Texas A&M Univ Corpus Christi Corpus Christi TX 78412 USA Univ Houston Downtown Houston TX USA

ISBN: (纸本)9798400704918

Smart homes, powered by a plethora of Internet of things (IoT) devices, such as smart thermostats, lights, and TVs, have gained immense popularity due to their simple voice command control, making them user-friendly for homeowners and their families. However, these voice commands can be potentially misused, especially by unauthorized individuals, like visitors or thieves, who may have not been previously authorized to manipulate security sensitive devices, e.g., smart locks. To address this issue, we propose a novel approach called Circles of Trust (CoT), rooted in a well-known namesake psychological concept which associates relationships to a specific degree of trust. this concept can be applied to an authorization framework, by linking relationships to an access level, e.g., homeowners and their spouses can be fully-trusted, whereas visitors and children may not. CoT can be further visualized as a multi-layered circle, where the most privileged user, e.g., a homeowner, is placed within the innermost layer, and therefore has access to every single device within a smart home via voice commands. Each subsequent layer has fewer access privileges than the previous, granting users in outer layers, like visitors, limited capabilities to manipulate devices. CoT aims to preserve the ease-of-access and convenience of smart home devices by integrating voice-based security policies, eliminating the need for graphical user interfaces (GUIs). the proposed CoT implementation includes three main components: the voice-to-text module, authorization engine, and IoT orchestrator. Following a prototype implementation, a user study and questionnaire will assess the user-friendliness and device convenience.

关键词： Smart Homes Authorization access control Voice Commands

来源：评论

学校读者我要写书评

暂无评论

Privacy-Preserving Multi-Party access control for third-Party UAV Services 23

Privacy-Preserving Multi-Party Access Control for Third-Part...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： George, Dominik Roy Sciancalepore, Savio Zannone, Nicola Eindhoven Univ Technol Eindhoven Netherlands

ISBN: (纸本)9798400701733

third-Party Unmanned Aerial Vehicle (UAV) Services, a.k.a. Drone-as-a-Service (DaaS), are an increasingly adopted business model, which enables possibly unskilled users, with no background knowledge, to operate drones and run automated drone-based tasks. Although these services provide significant advantages, the resources provided by drones are typically owned by multiple parties. thus, third-Party UAV services require adopting multi-party access control solutions. In this context, the leakage of the access control policies specified by the data owners might disclose confidential information and, thus, they should be protected as well. In this work, we propose a privacy-preserving multi-party access control solution tailored to the application scenarios of third-Party UAV Services. Our solution advances an existing privacy-preserving multi-party access control framework based on Secure Function Evaluation to fit the distributed and heterogeneous nature of drone deployments. through an extensive experimental evaluation, we demonstrate our solution can perform private policy evaluation on constrained devices in a reasonable time while requiring limited communication, memory, and energy overhead.

关键词： Drones Authorization Secure Function Evaluation

来源：评论

学校读者我要写书评

暂无评论

Poster: Attribute Based access control for IoT Devices in 5G Networks 23

Poster: Attribute Based Access Control for IoT Devices in 5G...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Kaven, Sascha Skwarek, Volker Hamburg Univ Appl Sci Res & Transfer Ctr CyberSec Hamburg Germany

ISBN: (纸本)9798400701733

the deployment of 5G technology has the potential to usher in a new era for the internet of things (IoT). the introduction of new use cases, such as massive machine-type communications (mMTC), referring to a large number of IoT devices, resulting in the increasing importance of 5G as the basic communication infrastructure for IoT. However, the increasing connectivity of IoT devices coincides with a number of risks to security. Many IoT sensors have limited resources and, therefore, cannot perform the complex security measures required to protect them from attacks and data loss. Furthermore, IoT networks are very scattered, distributed and dynamic, so decentralised security measures are required. To address these challenges, this poster proposes the integration of attribute-based access control (ABAC) into the 5G service-based architecture. this approach aims to prevent unauthorized access to IoT devices at the network level, thereby alleviating the computational burden on resource-constrained IoT devices. By implementing ABAC, the proposed solution offers a more efficient method for managing access control within the IoT landscape in the context of 5G networks.

关键词： 5G ABAC access control

来源：评论

学校读者我要写书评

暂无评论

Static and Dynamic Analysis of a Usage control System 29

Static and Dynamic Analysis of a Usage Control System

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Schopp, Ulrich Faghih, Fathiyeh Bandopadhyay, Subhajit Joumaa, Hussein Ibrahim, Amjad Xu, Chuangjie Ye, Xin Dimitrakos, theo Fortiss GmbH Munich Germany Huawei Technol Dusseldorf Munich Germany City Univ London London England Univ Trento Trento Italy Univ Kent Canterbury Kent England

ISBN: (纸本)9798400704918

the ability to exchange data while maintaining sovereignty is fundamental to emerging decentralized data-driven ecosystems. Data sovereignty refers to the entity's capability to be self-determined concerning data usage. As such, a data usage control system (UCON) is critical for sovereignty. UCON, a generalization of attribute-based access control, enforces continuous authorization, allowing attribute mutability after access is granted. In theory, UCON comprises a policy language to express constraints and obligations of data usage, and a technology to evaluate and enforce them. In practice, realizing the above is challenging and poses trust concerns. Partly, this is due to the complexity of UCON (continuous authorization, obligations) and the advanced usage constraints (stemming from, e.g., regulations or business contracts) combined with the decentralized nature of data ecosystems that allow different actors (e.g., data provider, security engineers) to author policies, and operate UCON. To that end, we propose to aid actors with automated policy analysis and verification methods. We present a new policy analysis method based on the combination of symbolic execution for policy evaluation and SMT solving to compute concrete scenarios answering queries on the policies. Our approach supports symbolic queries, where attribute values may be concrete values, a range of values, or symbolic variables. We also propose a monitoring approach using RTLola tool to verify the correctness of UCON's behavior in terms of decisions, obligations, and user-specified properties. To monitor obligations, we define their essential parameters and show how to monitor their fulfillment based on the configuration. We also present eight templates that allow users to generate the most important properties for monitoring UCON.

关键词： usage control static analysis runtime verification obligations

来源：评论

学校读者我要写书评

暂无评论

Specifying a Usage control System 23

Specifying a Usage Control System

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Schoepp, Ulrich Xu, Chuangjie Ibrahim, Amjad Faghih, Fathiyeh Dimitrakos, theo Fortiss GmbH Res Inst Free State Bavaria Munich Germany Huawei Technol Dusseldorf GmbH German Res Ctr Munich Germany Univ Kent Sch Comp Canterbury Kent England

ISBN: (纸本)9798400701733

Modern system architectures require sophisticated access and usage control mechanisms. the need stems from demanding requirements for security, data sovereignty and privacy regulations, as well as the challenges presented by architectural approaches like zero trust networking. Usage control systems provide one approach to encapsulate and manage the complexities related to access and usage control. In order to trust a usage control system, it is essential to ensure that usage control policies express the intended properties and are enforced correctly. To achieve this, we need a precise specification of the intended behavior of a usage control system. For attribute-based access control, the XacmL standard is a sufficient specification of the behavior of policies. Usage control models, such as UCON, extend access control with features for continuous authorization based on mutability of attribute values. this adds significant complexity to the problem of specifying the intended behavior. In this paper, we identify challenges with specifying a practical usage control system regarding continuous control, obligations, and concurrency aspects. We describe an approach to specifying the UCON+ model of Dimitrakos et al. and outline an implementation of the specification with Answer Set Programming.

关键词： ABAC usage control specification semantics obligations

来源：评论

学校读者我要写书评

暂无评论

Synthesizing and Analyzing Attribute-Based access control Model Generated from Natural Language Policy Statements 23

Synthesizing and Analyzing Attribute-Based Access Control Mo...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Abdelgawad, Mahmoud Ray, Indrakshi Alqurashi, Saja Venkatesha, Videep Shirazi, Hosein Colorado State Univ Dept Comp Sci Ft Collins CO 80523 USA San Diego State Univ Management Informat Syst San Diego CA 92182 USA

ISBN: (纸本)9798400701733

access control policies (ACPs) are natural language statements that describe criteria under which users can access resources. We focus on constructing NIST Next Generation access control (NGAC) ABAC model from ACP statements. NGAC is more complex than RBAC or XacmL ABAC as it supports dynamic, event-based policies, as well as prohibitions. We provide algorithms that use spaCy, a NLP library, to extract entities and relations from ACP sentences and convert them into the NGAC model. We then convert this NGAC model into Neo4j representation for the purpose of analysis. We apply the approach to various real-world ACP datasets to demonstrate the feasibility and assess scalability. We demonstrate that the approach is scalable and effectively extracts the NGAC ABAC model from large ACP datasets. We also show that redundancies and inconsistencies of ACP sentences are often found in unclean datasets.

关键词： Cybersecurity Attribute-Based access control (ABAC) Next Generation access control (NGAC) Natural Language Processing (NLP)

来源：评论

学校读者我要写书评

暂无评论

A Framework for Privacy-Preserving White-Box Anomaly Detection using a Lattice-Based access control 23

A Framework for Privacy-Preserving White-Box Anomaly Detecti...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Leite, Cristoffer den Hartog, Jerry Koster, Paul Eindhoven Univ Technol Eindhoven Netherlands Philips Res Eindhoven Netherlands

ISBN: (纸本)9798400701733

Privacy concerns are amongst the core issues that will constrain the adoption of distributed anomaly detection. Indeed, when outsourcing anomaly detection, i.e. with a party other than the data owner running the detection, confidential or private aspects of the observed data may need protection. Some privacy-enhancing function is usually employed. Because of the impact that this restriction causes in the creation of explainable alerts, finding mechanisms to balance the trade-off between privacy and usefulness has become increasingly important. Due to this motivation, in this paper, a privacy-preserving white-box anomaly detection framework is presented to facilitate matching the compatibility between service requirements and privacy restrictions of an user by using an access control based on a lattice of privacy protection levels. Our framework allows entities to verify these trade-offs by specifying required protection at the level of features. We evaluate the framework in a real-world scenario within the e-health setting. the results point out that it can generate interpretable alerts while protecting the confidentiality of the data.

关键词： privacy anomaly detection white-box lattice access control pets

来源：评论

学校读者我要写书评

暂无评论

ProgramAlly: Creating Custom Visual access Programs via Multi-Modal End-User Programming 24

ProgramAlly: Creating Custom Visual Access Programs via Mult...

引用

37th acm Annual symposium on User Interface Software and Technology (UIST)

作者： Herskovitz, Jaylin Xu, Andi Alharbi, Rahaf Guo, Anhong Univ Michigan Ann Arbor MI 48109 USA

ISBN: (纸本)9798400706288

Existing visual assistive technologies are built for simple and common use cases, and have few avenues for blind people to customize their functionalities. Drawing from prior work on DIY assistive technology, this paper investigates end-user programming as a means for users to create and customize visual access programs to meet their unique needs. We introduce ProgramAlly, a system for creating custom filters for visual information, e.g., 'find NUMBER on BUS', leveraging three end-user programming approaches: block programming, natural language, and programming by example. To implement ProgramAlly, we designed a representation of visual filtering tasks based on scenarios encountered by blind people, and integrated a set of on-device and cloud models for generating and running these programs. In user studies with 12 blind adults, we found that participants preferred different programming modalities depending on the task, and envisioned using visual access programs to address unique accessibility challenges that are otherwise difficult with existing applications. through ProgramAlly, we present an exploration of how blind end-users can create visual access programs to customize and control their experiences.

关键词： accessibility Assistive technology Do-it-yourself End-user programming Blind Visual impairment Design

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共39页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：