检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

47 篇 会议

馆藏范围

47 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

40 篇 工学
- 40 篇 计算机科学与技术...
- 18 篇 电气工程
- 5 篇 软件工程
- 1 篇 控制科学与工程
- 1 篇 化学工程与技术
2 篇 理学
- 1 篇 数学
- 1 篇 化学
- 1 篇 系统科学
1 篇 管理学
- 1 篇 图书情报与档案管...

主题

20 篇 access control
6 篇 attribute-based ...
5 篇 internet of thin...
5 篇 policy mining
5 篇 xacml
5 篇 security
4 篇 abac
4 篇 big data
4 篇 privacy
3 篇 risk
2 篇 policy formalism
2 篇 deep learning
2 篇 context-aware ap...
2 篇 object tags
2 篇 data lake
2 篇 fuzzy inference
2 篇 access control p...
2 篇 relationship-bas...
2 篇 iot
2 篇 role based

机构

3 篇 purdue univ w la...
2 篇 arizona state un...
2 篇 clemson univ cle...
2 篇 rutgers state un...
2 篇 univ insubria di...
2 篇 iit kharagpur kh...
1 篇 penn state univ ...
1 篇 quantitat sci so...
1 篇 university of te...
1 篇 iit kharagpur kh...
1 篇 rutgers universi...
1 篇 purdue universit...
1 篇 postech pohang
1 篇 eindhoven univer...
1 篇 univ north texas...
1 篇 univ texas san a...
1 篇 univ chinese aca...
1 篇 imperial coll en...
1 篇 mitre corp burli...
1 篇 nokia bell labs ...

作者

3 篇 gupta maanak
3 篇 bertino elisa
3 篇 sandhu ravi
2 篇 colombo pietro
2 篇 zannone nicola
2 篇 patwa farhan
2 篇 takabi hassan
2 篇 vaidya jaideep
2 篇 atluri vijayalak...
2 篇 crampton jason
2 篇 hu hongxin
2 篇 ferrari elena
2 篇 ranise silvio
2 篇 sural shamik
2 篇 ahn gail-joon
1 篇 doyle jon
1 篇 kim jong
1 篇 choi jiwon
1 篇 han wonkyu
1 篇 gautam mayank

语言

47 篇 英文

检索条件"任意字段=Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies"

共 47 条记录，以下是11-20 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Poster: Using Gini Impurity to Mine Attribute-based access control Policies with Environment Attributes 23

Poster: Using Gini Impurity to Mine Attribute-based Access C...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Das, Saptarshi Sural, Shamik Vaidya, Jaideep Atluri, Vijayalakshmi IIT Kharagpur Kharagpur W Bengal India Rutgers State Univ New Brunswick NJ USA

ISBN: (纸本)9781450356664

In Attribute-based access control (ABAC) systems, utilizing environment attributes along with the subject and object attributes introduces a dynamic nature to the access decisions. The inclusion of environment attributes helps in achieving a more fine-grained access control. In this paper, we present an ABAC policy mining algorithm that considers the environment attributes and their associated values while forming the rules. Furthermore, we use gini impurity to form the rules. This helps to minimize the number of rules in the generated policy. The experimental evaluation shows that our approach is quite effective in practice.

关键词： ABAC Policy mining Environment attributes Gini impurity

来源：评论

学校读者我要写书评

暂无评论

Poster: On the Safety and Efficiency of Virtual Firewall Elasticity control 22

Poster: On the Safety and Efficiency of Virtual Firewall Ela...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Li, Hongda Deng, Juan Hu, Hongxin Wang, Kuang-Ching Ahn, Gail-Joon Zhao, Ziming Han, Wonkyu Clemson Univ Clemson SC 29631 USA Arizona State Univ Tempe AZ 85287 USA

ISBN: (纸本)9781450347020

Firewalls have been typically used to enforce network access control. Network Functions Virtualization (NFV) envisions to implement firewall function as software instance (a.k.a virtual firewall). Virtual firewall provides great flexibility and elasticity, which are necessary to protect virtualized environments. In this poster, we propose an innovative virtual firewall controller, VFW controller, which enables safe, efficient and cost-effective virtual firewall elasticity control. In addition, we implement the core components of VFW controller on top of NFV and SDN environments. Our experimental results demonstrate that VFW controller is efficient to provide safe elasticity control of virtual firewalls.

关键词： Virtual Firewall Network Functions Visualization Software-Define Networking Elasticity control

来源：评论

学校读者我要写书评

暂无评论

Self-Generation of access control Policies 18

Self-Generation of Access Control Policies

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Calo, Seraphin Verma, Dinesh Chakraborty, Supriyo Bertino, Elisa Lupu, Emil Cirincione, Gregory IBM Res Yorktown Hts NY 10598 USA Purdue Univ W Lafayette IN 47907 USA Imperial Coll London England Army Res Labs Adelphi MD USA

ISBN: (纸本)9781450356664

access control for information has primarily focused on access statically granted to subjects by administrators usually in the context of a specific system. Even if mechanisms are available for access revocation, revocations must still be executed manually by an administrator. However, as physical devices become increasingly embedded and interconnected, access control needs to become an integral part of the resources being protected and be generated dynamically by the resources depending on the context in which they are being used. In this paper, we discuss a set of scenarios for access control needed in current and future systems and use that to argue that an approach for resources to generate and manage their access control policies dynamically on their own is needed. We discuss some approaches for generating such access control policies that may address the requirements of the scenarios.

关键词： Dynamic Security IoT Machine Learning AI Autonomic access control

来源：评论

学校读者我要写书评

暂无评论

Multi-Party access control: Requirements, State of the Art and Open Challenges 18

Multi-Party Access Control: Requirements, State of the Art a...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Squicciarini, Anna Cinzia Rajtmajer, Sarah Michele Zannone, Nicola Penn State Univ University Pk PA 16802 USA Quantitat Sci Solut Arlington VA USA Eindhoven Univ Technol Eindhoven Netherlands

ISBN: (纸本)9781450356664

Multi-party access control is gaining attention and prominence within the community, as access control models and systems are faced with complex, jointly-owned and jointly-managed content. Traditional single-user approaches lack the richness and flexibility to accommodate these scenarios, resulting in undesired disclosure of sensitive data and resources. Moving forward fundamental work in this area is critical. In particular, as personal data amasses and algorithms for data mining improve, personally identifiable information is more readily inferred and the practical implications of privacy decisions are relatively opaque. This is true even at the individual level, but the parallel problem for jointly managed content involves the cross product of these complex outcomes. In this presentation, we discuss fundamental requirements of successful multi-party access control mechanisms and contextualize these concepts with respect to the state of the art. Based on this analysis, we identify open challenges and draw a roadmap for future work.

关键词： Collaborative access control data governance literature study

来源：评论

学校读者我要写书评

暂无评论

On Risk in access control Enforcement 22

On Risk in Access Control Enforcement

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Petracca, Giuseppe Capobianco, Frank Skalka, Christian Jaeger, Trent Penn State Univ Sch Elect Engn & Comp Sci University Pk PA 16802 USA Univ Vermont Coll Engn & Math Sci Burlington VT 05405 USA

ISBN: (纸本)9781450347020

While we have long had principles describing how access control enforcement should be implemented, such as the reference monitor concept, imprecision in access control mechanisms and access control policies leads to risks that may enable exploitation. In practice, least privilege access control policies often allow information flows that may enable exploits. In addition, the implementation of access control mechanisms often tries to balance security with ease of use implicitly (e.g., with respect to determining where to place authorization hooks) and approaches to tighten access control, such as accounting for program context, are ad hoc. In this paper, we define four types of risks in access control enforcement and explore possible approaches and challenges in tracking those types of risks. In principle, we advocate runtime tracking to produce risk estimates for each of these types of risk. To better understand the potential of risk estimation for authorization, we propose risk estimate functions for each of the four types of risk, finding that benign program deployments accumulate risks in each of the four areas for ten Android programs examined. As a result, we find that tracking of relative risk may be useful for guiding changes to security choices, such as authorized unsafe operations or placement of authorization checks, when risk differs from that expected.

关键词： Risk access control Enforcement

来源：评论

学校读者我要写书评

暂无评论

A Datalog Framework for Modeling Relationship-based access control Policies 22

A Datalog Framework for Modeling Relationship-based Access C...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Pasarella, Edelmira Lobo, Jorge Univ Politecn Cataluna Comp Sci Dept Barcelona Spain Univ Pompeu Fabra Inst Catalana Recerca & Estudis Avancats ICREA Barcelona Spain

ISBN: (纸本)9781450347020

Relationships like friendship to limit access to resources have been part of social network applications since their beginnings. Describing access control policies in terms of relationships is not particular to social networks and it arises naturally in many situations. Hence, we have recently seen several proposals formalizing different Relationship-based access control (ReBAC) models. In this paper, we introduce a class of Datalog programs suitable for modeling ReBAC and argue that this class of programs, that we called ReBAC Datalog policies, provides a very general framework to specify and implement ReBAC policies. To support our claim, we first formalize the merging of two recent proposals for modeling ReBAC, one based on hybrid logic and the other one based on path regular expressions. We present extensions to handle negative authorizations and temporal policies. We describe mechanism for policy analysis, and then discuss the feasibility of using Datalog-based systems as implementations.

关键词： Relationship-based access control security and privacy policies Datalog

来源：评论

学校读者我要写书评

暂无评论

HCAP: A History-Based Capability System for IoT Devices 18

HCAP: A History-Based Capability System for IoT Devices

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Tandon, Lakshya Fong, Philip W. L. Safavi-Naini, Reihaneh Univ Calgary Calgary AB Canada

ISBN: (纸本)9781450356664

Permissions are highly sensitive in Internet-of-Things (IoT) applications, as IoT devices collect our personal data and control the safety of our environment. Rather than simply granting permissions, further constraints shall be imposed on permission usage so as to realize the Principle of Least Privilege. Since IoT devices are physically embedded, they are often accessed in a particular sequence based on their relative physical positions. Monitoring if such sequencing constraints are honoured when IoT devices are accessed provides a means to fence off malicious accesses. This paper proposes a history-based capability system, HCAP, for enforcing permission sequencing constraints in a distributed authorization environment. We formally establish the security guarantees of HCAP, and empirically evaluate its performance.

关键词： Internet of Things distributed authorization History-Based access control capability system formal verification safety liveness performance evaluation

来源：评论

学校读者我要写书评

暂无评论

Privacy-Aware Risk-Adaptive access control in Health Information Systems using Topic models 18

Privacy-Aware Risk-Adaptive Access Control in Health Informa...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Zhang, Wenxi Li, Hao Zhang, Min Lv, Zhiquan Chinese Acad Sci Inst Software Beijing Peoples R China Univ Chinese Acad Sci Beijing Peoples R China Coordinat Ctr China Natl Comp Network Emergency Response Tech Team Beijing Peoples R China

ISBN: (纸本)9781450356664

Traditional role-based access control fails to meet the privacy requirements for patient data in medical systems, as it is infeasible for policy makers to foresee what information doctors may need for diagnosis and treatment in various situations. The universal practice in hospitals is to grant doctors unlimited access, which in turn increases the risk of breaching patient privacy. In this paper, we propose a dynamic risk-adaptive access control model for health IT systems by taking into consideration the relationships between data and access behaviors. By training topic models to portray individual and group-level access behaviors, we quantify the risk for each user over a certain period of time. Malicious users are supposed to get higher risk scores than honest users due to improper requests. Thus their further access would be denied under our access control scheme. The topic model and risk scores are periodically updated to advance the self-adaptability of the system. Experimental results have shown that our solution could effectively distinguish malicious doctors even if they deliberately conceal the misconducts.

关键词： access control Privacy Risk Quantification Topic Model Health-care

来源：评论

学校读者我要写书评

暂无评论

proceedings of acm symposium on access control models and technologies, SacmAT

Proceedings of ACM Symposium on Access Control Models and Te...

引用

22nd acm symposium on access control models and technologies, SacmAT 2017

ISBN: (纸本)9781450347020

The proceedings contain 29 papers. The topics discussed include: a flexible authorization architecture for systems of interoperable medical devices;uncoupling biometrics from templates for secure and privacy-preserving authentication;FACT: functionality-centric access control system for IoT programming frameworks;an enforcement model for preventing inference attacks in social computing platforms;a Datalog framework for modeling relationship-based access control policies;a location-privacy approach for continuous queries;design of an anomaly-based threat detection & explication system;access control model for the Hadoop ecosystem;leveraging hardware isolation for process level access control & authentication;a framework for the cryptographic enforcement of information flow policies;towards PII-based multiparty access control for photo sharing in online social networks;verifiable assume-guarantee privacy specifications for actor component architectures;provable enforcement of HIPAA-compliant release of medical records using the history aware programming language;on the satisfiability of workflows with release points;a secure sum protocol and its application to privacy-preserving multi-party analytics;and enabling data sharing in contextual environments: policy representation and analysis.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Towards a Top-down Policy Engineering Framework for Attribute-based access control 22

Towards a Top-down Policy Engineering Framework for Attribut...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Narouei, Masoud Khanpour, Hamed Takabi, Hassan Parde, Natalie Nielsen, Rodney Univ North Texas INSPIRE Lab Denton TX 76203 USA Univ North Texas Machine Learning Lab Denton TX 76203 USA Univ North Texas HiLT Lab Denton TX 76203 USA

ISBN: (纸本)9781450347020

Attribute-based access control (ABAC) is a logical access control methodology where authorization to perform a set of operations is based on attributes of the user, the objects being accessed, the environment, and a number of other attribute sources that may be relevant to the current request. Once fully implemented within an enterprise, ABAC promotes information sharing while maintaining control of the information. However, the cost of developing ABAC policies can be a significant obstacle for organizations to migrate from traditional access control models to ABAC. Most organizations have high-level requirement specifications that define security policies and include a set of access control policies. Taking advantage of this rich source of information, we introduce a top-down policy engineering framework for ABAC that aims to automatically extract policies from unrestricted natural language documents and then, we present our methodology to extract policy related information using deep neural networks. We first create an annotated dataset comprised of 2660 sentences from real-world policy documents. We then train a deep recurrent neural network (RNN) to identify sentences containing access control policies (ACP) from irrelevant content. We applied the RNN to our new dataset as well as to five other, smaller datasets that have been employed in prior work on this task, and show that our model outperforms the state-of-the-art and leads to a performance improvement of 5.58% over the previously reported results.

关键词： access control policy attribute-based access control policy engineering recurrent neural network deep learning

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：