检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

362 篇 会议
8 篇 期刊文献

馆藏范围

370 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

328 篇 工学
- 321 篇 计算机科学与技术...
- 151 篇 软件工程
- 77 篇 控制科学与工程
- 25 篇 信息与通信工程
- 13 篇 安全科学与工程
- 10 篇 电气工程
- 6 篇 交通运输工程
- 4 篇 电子科学与技术（可...
- 3 篇 网络空间安全
- 2 篇 力学（可授工学、理...
- 2 篇 建筑学
- 2 篇 化学工程与技术
- 2 篇 生物工程
- 1 篇 机械工程
- 1 篇 光学工程
34 篇 管理学
- 30 篇 图书情报与档案管...
- 11 篇 管理科学与工程(可...
- 2 篇 工商管理
20 篇 理学
- 15 篇 数学
- 3 篇 统计学（可授理学、...
- 2 篇 物理学
- 2 篇 生物学
- 1 篇 化学
- 1 篇 地球物理学
9 篇 法学
- 9 篇 社会学
2 篇 经济学
- 2 篇 应用经济学
2 篇 医学
- 2 篇 基础医学(可授医学...
- 2 篇 临床医学
- 2 篇 公共卫生与预防医...
1 篇 教育学
- 1 篇 教育学

主题

134 篇 access control
17 篇 security
16 篇 rbac
13 篇 authorization
12 篇 privacy
9 篇 attribute-based ...
8 篇 role-based acces...
8 篇 xacml
8 篇 relationship-bas...
8 篇 control system a...
8 篇 usage control
7 篇 internet of thin...
5 篇 abac
5 篇 xml
4 篇 policy mining
4 篇 information flow...
4 篇 policy enforceme...
4 篇 security of data
4 篇 activity-centric...
4 篇 access control m...

机构

7 篇 purdue univ w la...
5 篇 eindhoven univ t...
5 篇 suny albany alba...
4 篇 purdue universit...
4 篇 univ texas dalla...
4 篇 univ genoa dibri...
4 篇 carnegie mellon ...
4 篇 purdue univ dept...
3 篇 univ kent sch co...
3 篇 univ n carolina ...
3 篇 karlsruhe inst t...
3 篇 kings coll londo...
3 篇 suny stony brook...
2 篇 univ waterloo wa...
2 篇 univ trento dept...
2 篇 univ. of texas d...
2 篇 department of co...
2 篇 university of so...
2 篇 colorado state u...
2 篇 university of lu...

作者

16 篇 bertino elisa
15 篇 crampton jason
9 篇 lobo jorge
9 篇 sandhu ravi
9 篇 ahn gail-joon
8 篇 li ninghui
7 篇 ray indrakshi
6 篇 zannone nicola
6 篇 tripunitara mahe...
6 篇 iyer padmavathi
5 篇 masoumzadeh amir...
5 篇 rubio-medrano ca...
5 篇 vaidya jaideep
5 篇 molloy ian
5 篇 beznosov konstan...
5 篇 kerschbaum flori...
5 篇 armando alessand...
5 篇 thuraisingham bh...
5 篇 stoller scott d.
5 篇 hartenstein hann...

语言

367 篇 英文
3 篇 其他

检索条件"任意字段=Proceedings of the 20th ACM Symposium on Access Control Models and Technologies"

共 370 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

A Self-Sovereign Identity Approach to Decentralized access control with Transitive Delegations 29

A Self-Sovereign Identity Approach to Decentralized Access C...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Vrielynck, Pieter-Jan Van hamme, Tim Ghostin, Rawad Lagaisse, Bert Preuveneers, Davy Joosen, Wouter Katholieke Univ Leuven DistriNet B-3001 Leuven Belgium

ISBN: (纸本)9798400704918

In this paper, we introduce a new decentralized access control framework with transitive delegation capabilities that tackles the performance and scalability limitations of the existing state-of-the-art solutions. In order to accomplish this, the proposed solution is anchored in the self-sovereign identity (SSI) paradigm, which embodies a distributed identity management system. By adopting this paradigm, we obviate slow cryptographic premises such as identity-based encryption (IBE) that were used in prior work. Furthermore, we enhance the existing verifiable credentials (VCs) from this paradigm by introducing our own decentralized permission objects to support the concept of transitive delegations. this concept allows delegates to further delegate their access to resources with the same or fewer privileges to other entities within the framework. this renders our solution suitable for diverse scenarios, including applications in decentralized building access management. To the best of our knowledge, we are the first to introduce the concept of transitive delegations in this paradigm. Finally, our performance experiments show a performance enhancement of three orders of magnitude compared to the prevailing state-of-the-art solutions.

关键词： access control Self-sovereign identity Transitive delegation

来源：评论

学校读者我要写书评

暂无评论

Hierarchical Key Assignment Schemes with Key Rotation 29

Hierarchical Key Assignment Schemes with Key Rotation

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Belfiore, Roberta Cimorelli De Santis, Alfredo Ferrara, Anna Lisa Masucci, Barbara Univ Molise Dept Biosci Div Comp Sci Campobasso Italy Univ Salerno Dept Comp Sci Fisciano Italy

ISBN: (纸本)9798400704918

Hierarchical structures are frequently used to manage access to sensitive data in various contexts, ranging from organizational settings to IoT networks. A Hierarchical Key Assignment Scheme (HKAS) is designed to cryptographically enforce access control in hierarchical structures. It operates by assigning secrets and encryption keys to a set of classes within a partially ordered hierarchy. this approach ensures that the secret of a higher-level class can be used to efficiently derive keys for all classes positioned at a lower level in the hierarchy. In this paper, we introduce a novel cryptographic primitive that we name HKAS with Key Rotation (KR-HKAS). this extension enhances the current HKAS framework by enabling a provably secure mechanism for periodically rotating both encryption keys and secrets, without necessitating a complete setup reset. this proactive approach effectively mitigates the risk of security breaches due to compromised cryptographic material, aligning with the best security practice.

关键词： access control Hierarchical Key Assignment Provable Security

来源：评论

学校读者我要写书评

暂无评论

Poster: How to Raise a Robot - Beyond access control Constraints in Assistive Humanoid Robots 23

Poster: How to Raise a Robot - Beyond Access Control Constra...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Hemken, Niklas Jacob, Florian Peller-Konrad, Fabian Kartmann, Rainer Asfour, Tamim Hartenstein, Hannes KIT Karlsruhe Germany

ISBN: (纸本)9798400701733

Humanoid robots will be able to assist humans in their daily life, in particular due to their versatile action capabilities. However, while these robots need a certain degree of autonomy to learn and explore, they also should respect various constraints, for access control and beyond. We explore incorporating privacy and security constraints (Activity-Centric access control and Deep Learning Based access control) with robot task planning approaches (classical symbolic planning and end-to-end learning-based planning). We report preliminary results on their respective trade-offs and conclude that a hybrid approach will most likely be the method of choice.

关键词： Humanoid Robots Robot Task Planning Activity-Centric access control Deep Learning based access control

来源：评论

学校读者我要写书评

暂无评论

Obligation Management Framework for Usage control 29

Obligation Management Framework for Usage Control

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Joumaa, Hussein Hariri, Ali Petrovska, Ana Osliak, Oleksii Dimitrakos, theo Crispo, Bruno Univ Trento Dept Informat Engn & Comp Sci Trento Italy Huawei Technol Duesseldorf GmbH Munich Germany Univ Kent Sch Comp Canterbury Kent England

ISBN: (纸本)9798400704918

Obligations were introduced in access and usage control as a mechanism to specify mandatory actions to be fulfilled as part of authorization. In this paper, we address challenges related to obligation management in access and usage control, focusing on the Abbreviated Language For Authorization (ALFA) and eXtensible access control Markup Language (XacmL) standards. Firstly, we provide a comprehensive analysis of Combining Algorithms (CAs) to determine their influence on the selection and ordering of obligations and identify nondeterminism. We then propose solutions to eliminate such nondeterminism enabling policy authors to explicitly specify the intended behavior. Secondly, we discuss the recurrence of obligations in usage control that occurs due to policy re-evaluations, highlighting the need to execute some obligations only once. We address this problem by introducing a parameter that enables policy authors to explicitly specify whether they intend an obligation to recur or not. thirdly, we highlight an ambiguity in obligation applicability to lifecycle phases (e.g., ongoing) in usage control, arising from the lack of explicit associations between obligations and phases in particular cases. To address this issue, we introduce a parameter that explicitly specifies the scope of an obligation, allowing policy authors to restrict obligations to a single phase or apply them to the entire authorization. Finally, we extend the functionality of the Obligation Manager (OM) component to combine all three solutions, providing deterministic obligation management.

关键词： Obligations Obligation Management Usage control access control ALFA XacmL

来源：评论

学校读者我要写书评

暂无评论

Towards Automated Learning of access control Policies Enforced by Web Applications 23

Towards Automated Learning of Access Control Policies Enforc...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Iyer, Padmavathi Masoumzadeh, Amir SUNY Albany Albany NY 12222 USA

ISBN: (纸本)9798400701733

Obtaining an accurate specification of the access control policy enforced by an application is essential in ensuring that it meets our security/privacy expectations. this is especially important as many of real-world applications handle a large amount and variety of data objects that may have different applicable policies. We investigate the problem of automated learning of access control policies from web applications. the existing research on mining access control policies has mainly focused on developing algorithms for inferring correct and concise policies from low-level authorization information. However, little has been done in terms of systematically gathering the low-level authorization data and applications' data models that are prerequisite to such a mining process. In this paper, we propose a novel black-box approach to inferring those prerequisites and discuss our initial observations on employing such a framework in learning policies from real-world web applications.

关键词： policy mining web application relationship-based access control automated concrete systems

来源：评论

学校读者我要写书评

暂无评论

Poster: Integrating Spatio-temporal Authorization With Generic Cloud-based Software Architecture for Internet Of things Devices 23

Poster: Integrating Spatio-temporal Authorization With Gener...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Moncivais, Marshal Al Lail, Mustafa Texas A&M Int Univ Laredo TX 78041 USA

ISBN: (纸本)9798400701733

the significant rise in the usage of IoT devices and their security issues has created a demand for improved security for these systems. Unfortunately, no standard IoT architecture exists, making the development of security solutions for IoT systems difficult. Towards this end, we leverage an IoT framework to create a generic IoT software architecture and integrate it with an extension of the RBAC model incorporating the time and location of users to determine access to different IoT resources. We provide a prototype implementation of the integrated architecture to show its feasibility.

关键词： access control software architecture Internet of things

来源：评论

学校读者我要写书评

暂无评论

Security Analysis of access control Policies for Smart Homes 23

Security Analysis of Access Control Policies for Smart Homes

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Belfiore, Roberta Cimorelli Ferrara, Anna Lisa Univ Molise Campobasso Italy

ISBN: (纸本)9798400701733

Ensuring security is crucial in smart home settings, where only authorized users should have access to home devices. Over the past decade, researchers have focused on developing access control policies and evaluating their efficacy in preventing unauthorized access. A new variant of Role-Based access control (RBAC), called Extended Generalized Role-Based access control (EGRBAC), has recently been introduced to capture the intricate user-device-context interactions that are prevalent in smart home environments. In this paper, we demonstrate that the task of analyzing administrative EGRBAC policies for security can be performed by reducing it to the security analysis of administrative RBAC policies. We also conducted a case study on a realistic smart home to prove the viability of our approach with respect to security requirements such as availability and privilege escalation.

关键词： access control smart homes automated security analysis

来源：评论

学校读者我要写书评

暂无评论

SecureCheck: User-Centric and Geolocation-Aware access Mediation Contracts for Sharing Private Data 29

SecureCheck: User-Centric and Geolocation-Aware Access Media...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Hopkins, Jacob Rubio-Medrano, Carlos Texas A&M Univ Corpus Christi Corpus Christi TX USA

ISBN: (纸本)9798400704918

Data oversharing is a critical issue in today's technologically driven society. Numerous entities, i.e., corporations, governments, criminal groups, are collecting individuals' data. One potential cause is that current systems, such as verification systems, do not prioritize the minimization of exchanged data. To address this issue, we propose SecureCheck, a novel privacy-enhancing technology (PET) framework that prioritizes data minimization. We aim to ensure that individuals control technology and its access to themselves, and not technology controlling individuals or their data. To that end, our proposed framework is comprised of two components: a novel access control model, called access mediation contracts, that enables users to negotiate with third parties over what data is used in a verification event, and a novel recommendation system that recommends the access mediation contracts in situationally-aware manner using geolocation data. As a part of ongoing work, we are developing a privacy calculus model detailing the decision process for data exchange. Also, we are conducting an exploratory study to better identify how to resolve conflicts between data owners and verifiers. Finally, we are actively working towards VaxCheck, a prototype implementation of SecureCheck focused on vaccine verification systems, so we can assess its effectiveness and suitability for future deployments in practice.

关键词： Privacy Data Sharing Verification Privacy Enhancing Technology access Mediation Geolocation-based Recommendation

来源：评论

学校读者我要写书评

暂无评论

Prompting LLM to Enforce and Validate CIS Critical Security control 29

Prompting LLM to Enforce and Validate CIS Critical Security ...

引用

29th acm symposium on access control models and technologies (SacmAT)

作者： Ahmed, Mohiuddin Wei, Jinpeng Al-Shaer, Ehab Univ North Carolina Charlotte Software & Informat Syst Charlotte NC 28223 USA Carnegie Mellon Univ Sch Comp Sci Pittsburgh PA 15213 USA

ISBN: (纸本)9798400704918

Proper security control enforcement reduces the attack surface and protects the organizations against attacks. Organizations like NIST and CIS (Center for Internet Security) provide critical security controls (CSCs) as a guideline to enforce cyber security. Automated enforcement and measurability mechanisms for these CSCs still need to be developed. Analyzing the implementations of security products to validate security control enforcement is non-trivial. Moreover, manually analyzing and developing measures and metrics to monitor, and implementing those monitoring mechanisms are resource-intensive tasks and massively dependent on the security analyst's expertise and knowledge. To tackle those problems, we use large language models (LLMs) as a knowledge base and reasoner to extract measures, metrics, and monitoring mechanism implementation steps from security control descriptions to reduce the dependency on security analysts. Our approach used few-shot learning with chain-of-thought (CoT) prompting to generate measures and metrics and generated knowledge prompting for metrics implementation. Our evaluation shows that prompt engineering to extract measures, metrics, and monitoring implementation mechanisms can reduce dependency on humans and semi-automate the extraction process. We also demonstrate metric implementation steps using generated knowledge prompting with LLMs.

关键词： Critical Security control LLM Prompt Engineering Account Management

来源：评论

学校读者我要写书评

暂无评论

MSNetViews: Geographically Distributed Management of Enterprise Network Security Policy 23

MSNetViews: Geographically Distributed Management of Enterpr...

引用

28th acm symposium on access control models and technologies (SacmAT)

作者： Anjum, Iffat Sokal, Jessica Rehman, Hafiza Ramzah Weintraub, Ben Leba, Ethan Enck, William Nita-Rotaru, Cristina Reaves, Bradley NC State Univ Raleigh NC 27695 USA Northeastern Univ Boston MA 02115 USA

ISBN: (纸本)9798400701733

Commercially-available software defined networking (SDN) technologies will play an important role in protecting the on-premises resources that remain as enterprises transition to zero trust architectures. However, existing solutions assume the entire network resides in a single geographic location, requiring organizations with multiple sites to manually ensure consistency of security policy across all sites. In this paper, we present MSNetViews, which extends a single, globally-defined and managed, enterprise network security policy to many geographically distributed sites. Each site operates independently and enforces a site-specific policy slice that is dynamically parameterized with user location as employees roam between sites. We build a prototype of MSNetViews and show that for an enterprise with globally distributed sites, the average time for policy state to settle after a user roams to a new site is well below two seconds. As such, we demonstrate that multisite organizations can efficiently protect their on-premises network-attached devices via a single global perspective.

关键词： enterprise network zero trust sdn access-control least-privilege

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共37页 << < 1 2 3 4 5 6 7 8 9 10 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：