检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

47 篇 会议

馆藏范围

47 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

40 篇 工学
- 40 篇 计算机科学与技术...
- 18 篇 电气工程
- 5 篇 软件工程
- 1 篇 控制科学与工程
- 1 篇 化学工程与技术
2 篇 理学
- 1 篇 数学
- 1 篇 化学
- 1 篇 系统科学
1 篇 管理学
- 1 篇 图书情报与档案管...

主题

20 篇 access control
6 篇 attribute-based ...
5 篇 internet of thin...
5 篇 policy mining
5 篇 xacml
5 篇 security
4 篇 abac
4 篇 big data
4 篇 privacy
3 篇 risk
2 篇 policy formalism
2 篇 deep learning
2 篇 context-aware ap...
2 篇 object tags
2 篇 data lake
2 篇 fuzzy inference
2 篇 access control p...
2 篇 relationship-bas...
2 篇 iot
2 篇 role based

机构

3 篇 purdue univ w la...
2 篇 arizona state un...
2 篇 clemson univ cle...
2 篇 rutgers state un...
2 篇 univ insubria di...
2 篇 iit kharagpur kh...
1 篇 penn state univ ...
1 篇 quantitat sci so...
1 篇 university of te...
1 篇 iit kharagpur kh...
1 篇 rutgers universi...
1 篇 purdue universit...
1 篇 postech pohang
1 篇 eindhoven univer...
1 篇 univ north texas...
1 篇 univ texas san a...
1 篇 univ chinese aca...
1 篇 imperial coll en...
1 篇 mitre corp burli...
1 篇 nokia bell labs ...

作者

3 篇 gupta maanak
3 篇 bertino elisa
3 篇 sandhu ravi
2 篇 colombo pietro
2 篇 zannone nicola
2 篇 patwa farhan
2 篇 takabi hassan
2 篇 vaidya jaideep
2 篇 atluri vijayalak...
2 篇 crampton jason
2 篇 hu hongxin
2 篇 ferrari elena
2 篇 ranise silvio
2 篇 sural shamik
2 篇 ahn gail-joon
1 篇 doyle jon
1 篇 kim jong
1 篇 choi jiwon
1 篇 han wonkyu
1 篇 gautam mayank

语言

47 篇 英文

检索条件"任意字段=Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies"

共 47 条记录，以下是21-30 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Data Breach and Multiple Points to Stop It 18

Data Breach and Multiple Points to Stop It

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Yao, Danfeng (Daphne) Virginia Tech Dept Comp Sci Blacksburg VA 24061 USA

ISBN: (纸本)9781450356664

Preventing unauthorized access to sensitive data is an exceedingly complex access control problem. In this keynote, I will break down the data breach problem and give insights into how organizations could and should do to reduce their risks. The talk will start with discussing the technical reasons behind some of the recent high-profile data breach incidents (e.g., in Equifax, Target), as well as pointing out the threats of inadvertent or accidental data leaks. Then, I will show that there are usually multiple points to stop data breach and give an overview of the relevant state-of-the-art solutions. I will focus on some of the recent algorithmic advances in preventing inadvertent data loss, including set-based and alignment-based screening techniques, outsourced screening, and GPU-based performance acceleration. I will also briefly discuss the role of non-technical factors (e.g., organizational culture on security) in data protection. Because of the cat-and-mouse-game nature of cybersecurity, achieving absolute data security is impossible. However, proactively securing critical data paths through strategic planning and placement of security tools will help reduce the risks. I will also point out a few exciting future research directions, e.g., on data leak detection as a cloud security service and deep learning for reducing false alarms in continuous authentication and the prickly insider-threat detection.

关键词： Data breach data loss prevention access control multiple point of prevention inadvertent data leak software security system security anomaly detection ransomware security practices

来源：评论

学校读者我要写书评

暂无评论

Using Gini Impurity to Mine Attribute-based access control Policies with Environment Attributes 18

Using Gini Impurity to Mine Attribute-based Access Control P...

引用

proceedings of the 23nd acm on symposium on access control models and technologies

作者： Saptarshi Das Shamik Sural Jaideep Vaidya Vijayalakshmi Atluri IIT Kharagpur Kharagpur India Rutgers University Newark NJ USA

ISBN: (纸本)9781450356664

In Attribute-based access control (ABAC) systems, utilizing environment attributes along with the subject and object attributes introduces a dynamic nature to the access decisions. The inclusion of environment attributes helps in achieving a more fine-grained access control. In this paper, we present an ABAC policy mining algorithm that considers the environment attributes and their associated values while forming the rules. Furthermore, we use gini impurity to form the rules. This helps to minimize the number of rules in the generated policy. The experimental evaluation shows that our approach is quite effective in practice.

关键词： environment attributes ABAC gini impurity policy mining

来源：评论

学校读者我要写书评

暂无评论

Toward A Code Pattern Based Vulnerability Measurement Model 18

Toward A Code Pattern Based Vulnerability Measurement Model

引用

proceedings of the 23nd acm on symposium on access control models and technologies

作者： John Heaps Rocky Slavin Xiaoyin Wang University of Texas at San Antonio San Antonio TX USA

ISBN: (纸本)9781450356664

Many access control patterns, both positive and negative, have been identified in the past. However, there is little research describing how to leverage those patterns for the detection of access control bugs in code. Many software bug detection models and frameworks for access control exist, however most of these approaches and tools are process-based and suffer from many limitations. We propose a framework to detect access control bugs based on code pattern detection. Our framework will mine and generate bug patterns, detect those patterns in code, and calculate a vulnerability measure of software. Based on our knowledge we are the first pattern-based model for the detection and measurement of bugs in software. As a proof of concept, we perform a case study of the relational database access control pattern "Improper Authorization''.

关键词： code patterns vulnerability measurement access control

来源：评论

学校读者我要写书评

暂无评论

Towards Greater Expressiveness, Flexibility, and Uniformity in access control 18

Towards Greater Expressiveness, Flexibility, and Uniformity ...

引用

proceedings of the 23nd acm on symposium on access control models and technologies

作者： Jiaming Jiang Rada Chirkova Jon Doyle Arnon Rosenthal North Carolina State University Raleigh NC USA The MITRE Corporation Bedford MA USA

ISBN: (纸本)9781450356664

Attribute-based access control (ABAC) is a general access control model that subsumes numerous earlier access control models. Its increasing popularity stems from the intuitive generic structure of granting permissions based on application and domain attributes of users, subjects, objects, and other entities in the system. Multiple formal and informal languages have been developed to express policies in terms of such attributes. The utility of ABAC policy languages is potentially undermined without a properly formalized underlying model. The high-level structure in a majority of ABAC models consists of sets of tokens and sets of sets, expressions that demand that the reader unpack multiple levels of sets and tokens to determine what things mean. The resulting reduced readability potentially endangers correct expression, reduces maintainability, and impedes validation. These problems could be magnified in models that employ nonuniform representations of actions and their governing policies. We propose to avoid these magnified problems by recasting the high-level structure of ABAC models in a logical formalism that treats all actions (by users and others) uniformly and that keeps existing policy languages in place by interpreting their attributes in terms of the restructured model. In comparison to existing ABAC models, use of a logical language for model formalization, including hierarchies of types of entities and attributes, promises improved expressiveness in specifying the relationships between and requirements on application and domain attributes. A logical modeling language also potentially improves flexibility in representing relationships as attributes to support some widely used policy languages. Consistency and intelligibility are improved by using uniform means for representing different types of controlled actions---such as regular access control actions, administrative actions, and user logins---and their governing policies. Logical languages also provid

关键词： policy formalism attribute-based access control security logical models

来源：评论

学校读者我要写书评

暂无评论

Poster: Constrained Policy Mining in Attribute Based access control 22

Poster: Constrained Policy Mining in Attribute Based Access ...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Gautam, Mayank Jha, Sadhana Sural, Shamik Vaidya, Jaideep Atluri, Vijayalakshmi IIT Kharagpur Kharagpur W Bengal India Rutgers State Univ New Brunswick NJ USA

ISBN: (纸本)9781450347020

In practical access control systems, it is important to enforce an upper bound on the time taken to respond to an access request. This response time is directly influenced by the size (often called the weight) of each of the underlying access control rules. We present a constrained policy mining algorithm which takes an access control matrix as input and generates a set of attribute based access control (ABAC) rules, such that the weight of each rule is not more than a specified value and the sum of weights of all the rules is minimized. Our initial experiments show encouraging results.

关键词： ABAC Policy mining Constraint Weight

来源：评论

学校读者我要写书评

暂无评论

Security Analysis and Legal Compliance Checking for the Design of Privacy-friendly Information Systems 22

Security Analysis and Legal Compliance Checking for the Desi...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Guarda, Paolo Ranise, Silvio Siswantoro, Hari Univ Trento Fac Law Trento Italy FBK Irst Secur & Trust Trento Italy Univ Trento DISI Trento Italy

ISBN: (纸本)9781450347020

Nowadays, most of business practices involve personal data processing of customers and employees. This is strictly regulated by legislation to protect the rights of the data subject. Enforcing regulation into enterprise information system is a non-trivial task that requires an interdisciplinary approach. This paper presents a declarative framework to support the specification of information system designs, purpose-aware access control policies, and the legal requirements derived from the European Data Protection Directive. This allows for compliance checking via a reduction to policy refinement that is supported by available automated tools. We briefly discuss the results of the compliance analysis with a prototype tool on a simple but realistic scenario about the processing of personal data to produce salary slips of employees in an Italian organization.

关键词： EU DPD Legal compliance access control Policies

来源：评论

学校读者我要写书评

暂无评论

Mining Relationship-Based access control Policies 22

Mining Relationship-Based Access Control Policies

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Thang Bui Stoller, Scott D. Li, Jiajie SUNY Stony Brook Stony Brook NY 11794 USA

ISBN: (纸本)9781450347020

Relationship-based access control (ReBAC) provides a high level of expressiveness and flexibility that promotes security and information sharing. We formulate ReBAC as an object-oriented extension of attribute-based access control (ABAC) in which relationships are expressed using fields that refer to other objects, and path expressions are used to follow chains of relationships between objects. ReBAC policy mining algorithms have potential to significantly reduce the cost of migration from legacy access control systems to ReBAC, by partially automating the development of a ReBAC policy from an existing access control policy and attribute data. This paper presents an algorithm for mining ReBAC policies from access control lists (ACLs) and attribute data represented as an object model, and an evaluation of the algorithm on four sample policies and two large case studies. Our algorithm can be adapted to mine ReBAC policies from access logs and object models. It is the first algorithm for these problems.

关键词： relationship-based access control attribute-based access control policy mining

来源：评论

学校读者我要写书评

暂无评论

POSTER: access control Model for the Hadoop Ecosystem 22

POSTER: Access Control Model for the Hadoop Ecosystem

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Gupta, Maanak Patwa, Farhan Sandhu, Ravi UT San Antonio Dept Comp Sci Inst Cyber Secur One UTSA Circle San Antonio TX 78249 USA

ISBN: (纸本)9781450347020

Apache Hadoop is an important framework for fault-tolerant and distributed storage and processing of Big Data. Hadoop core platform along with other open-source tools such as Apache Hive, Storm, HBase offer an ecosystem to enable users to fully harness Big Data potential. Apache Ranger and Apache Sentry provide access control capabilities to several ecosystem components by offering centralized policy administration and enforcement through plugins. In this work we discuss the access control model for Hadoop ecosystem (referred as HeAC) used by Apache Ranger (release 0.6) and Sentry (release 1.7.0) along with Hadoop 2.x native authorization capabilities. This multi-layer model provides several access enforcement points to restrict unauthorized users to cluster resources. We further outline some preliminary approaches to extend the HeAC model consistent with widely accepted access control models.

关键词： access control Hadoop Ecosystem Big Data Data Lake Role Based Attributes Groups Hierarchy Object Tags

来源：评论

学校读者我要写书评

暂无评论

Poster: On the Safety and Efficiency of Virtual Firewall Elasticity control 22

Poster: On the Safety and Efficiency of Virtual Firewall Ela...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Li, Hongda Deng, Juan Hu, Hongxin Wang, Kuang-Ching Ahn, Gail-Joon Zhao, Ziming Han, Wonkyu Clemson Univ Clemson SC 29631 USA Arizona State Univ Tempe AZ 85287 USA

ISBN: (纸本)9781450347020

Firewalls have been typically used to enforce network access control. Network Functions Virtualization (NFV) envisions to implement firewall function as software instance (a.k.a virtual firewall). Virtual firewall provides great flexibility and elasticity, which are necessary to protect virtualized environments. In this poster, we propose an innovative virtual firewall controller, VFW controller, which enables safe, efficient and cost-effective virtual firewall elasticity control. In addition, we implement the core components of VFW controller on top of NFV and SDN environments. Our experimental results demonstrate that VFW controller is efficient to provide safe elasticity control of virtual firewalls.

关键词： Virtual Firewall Network Functions Visualization Software-Define Networking Elasticity control

来源：评论

学校读者我要写书评

暂无评论

On Risk in access control Enforcement 22

On Risk in Access Control Enforcement

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Petracca, Giuseppe Capobianco, Frank Skalka, Christian Jaeger, Trent Penn State Univ Sch Elect Engn & Comp Sci University Pk PA 16802 USA Univ Vermont Coll Engn & Math Sci Burlington VT 05405 USA

ISBN: (纸本)9781450347020

While we have long had principles describing how access control enforcement should be implemented, such as the reference monitor concept, imprecision in access control mechanisms and access control policies leads to risks that may enable exploitation. In practice, least privilege access control policies often allow information flows that may enable exploits. In addition, the implementation of access control mechanisms often tries to balance security with ease of use implicitly (e.g., with respect to determining where to place authorization hooks) and approaches to tighten access control, such as accounting for program context, are ad hoc. In this paper, we define four types of risks in access control enforcement and explore possible approaches and challenges in tracking those types of risks. In principle, we advocate runtime tracking to produce risk estimates for each of these types of risk. To better understand the potential of risk estimation for authorization, we propose risk estimate functions for each of the four types of risk, finding that benign program deployments accumulate risks in each of the four areas for ten Android programs examined. As a result, we find that tracking of relative risk may be useful for guiding changes to security choices, such as authorized unsafe operations or placement of authorization checks, when risk differs from that expected.

关键词： Risk access control Enforcement

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：