检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

47 篇 会议

馆藏范围

47 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

40 篇 工学
- 40 篇 计算机科学与技术...
- 18 篇 电气工程
- 5 篇 软件工程
- 1 篇 控制科学与工程
- 1 篇 化学工程与技术
2 篇 理学
- 1 篇 数学
- 1 篇 化学
- 1 篇 系统科学
1 篇 管理学
- 1 篇 图书情报与档案管...

主题

20 篇 access control
6 篇 attribute-based ...
5 篇 internet of thin...
5 篇 policy mining
5 篇 xacml
5 篇 security
4 篇 abac
4 篇 big data
4 篇 privacy
3 篇 risk
2 篇 policy formalism
2 篇 deep learning
2 篇 context-aware ap...
2 篇 object tags
2 篇 data lake
2 篇 fuzzy inference
2 篇 access control p...
2 篇 relationship-bas...
2 篇 iot
2 篇 role based

机构

3 篇 purdue univ w la...
2 篇 arizona state un...
2 篇 clemson univ cle...
2 篇 rutgers state un...
2 篇 univ insubria di...
2 篇 iit kharagpur kh...
1 篇 penn state univ ...
1 篇 quantitat sci so...
1 篇 university of te...
1 篇 iit kharagpur kh...
1 篇 rutgers universi...
1 篇 purdue universit...
1 篇 postech pohang
1 篇 eindhoven univer...
1 篇 univ north texas...
1 篇 univ texas san a...
1 篇 univ chinese aca...
1 篇 imperial coll en...
1 篇 mitre corp burli...
1 篇 nokia bell labs ...

作者

3 篇 gupta maanak
3 篇 bertino elisa
3 篇 sandhu ravi
2 篇 colombo pietro
2 篇 zannone nicola
2 篇 patwa farhan
2 篇 takabi hassan
2 篇 vaidya jaideep
2 篇 atluri vijayalak...
2 篇 crampton jason
2 篇 hu hongxin
2 篇 ferrari elena
2 篇 ranise silvio
2 篇 sural shamik
2 篇 ahn gail-joon
1 篇 doyle jon
1 篇 kim jong
1 篇 choi jiwon
1 篇 han wonkyu
1 篇 gautam mayank

语言

47 篇 英文

检索条件"任意字段=Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies"

共 47 条记录，以下是31-40 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

A Datalog Framework for Modeling Relationship-based access control Policies 22

A Datalog Framework for Modeling Relationship-based Access C...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Pasarella, Edelmira Lobo, Jorge Univ Politecn Cataluna Comp Sci Dept Barcelona Spain Univ Pompeu Fabra Inst Catalana Recerca & Estudis Avancats ICREA Barcelona Spain

ISBN: (纸本)9781450347020

Relationships like friendship to limit access to resources have been part of social network applications since their beginnings. Describing access control policies in terms of relationships is not particular to social networks and it arises naturally in many situations. Hence, we have recently seen several proposals formalizing different Relationship-based access control (ReBAC) models. In this paper, we introduce a class of Datalog programs suitable for modeling ReBAC and argue that this class of programs, that we called ReBAC Datalog policies, provides a very general framework to specify and implement ReBAC policies. To support our claim, we first formalize the merging of two recent proposals for modeling ReBAC, one based on hybrid logic and the other one based on path regular expressions. We present extensions to handle negative authorizations and temporal policies. We describe mechanism for policy analysis, and then discuss the feasibility of using Datalog-based systems as implementations.

关键词： Relationship-based access control security and privacy policies Datalog

来源：评论

学校读者我要写书评

暂无评论

proceedings of acm symposium on access control models and technologies, SacmAT

Proceedings of ACM Symposium on Access Control Models and Te...

引用

22nd acm symposium on access control models and technologies, SacmAT 2017

ISBN: (纸本)9781450347020

The proceedings contain 29 papers. The topics discussed include: a flexible authorization architecture for systems of interoperable medical devices;uncoupling biometrics from templates for secure and privacy-preserving authentication;FACT: functionality-centric access control system for IoT programming frameworks;an enforcement model for preventing inference attacks in social computing platforms;a Datalog framework for modeling relationship-based access control policies;a location-privacy approach for continuous queries;design of an anomaly-based threat detection & explication system;access control model for the Hadoop ecosystem;leveraging hardware isolation for process level access control & authentication;a framework for the cryptographic enforcement of information flow policies;towards PII-based multiparty access control for photo sharing in online social networks;verifiable assume-guarantee privacy specifications for actor component architectures;provable enforcement of HIPAA-compliant release of medical records using the history aware programming language;on the satisfiability of workflows with release points;a secure sum protocol and its application to privacy-preserving multi-party analytics;and enabling data sharing in contextual environments: policy representation and analysis.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Towards a Top-down Policy Engineering Framework for Attribute-based access control 22

Towards a Top-down Policy Engineering Framework for Attribut...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Narouei, Masoud Khanpour, Hamed Takabi, Hassan Parde, Natalie Nielsen, Rodney Univ North Texas INSPIRE Lab Denton TX 76203 USA Univ North Texas Machine Learning Lab Denton TX 76203 USA Univ North Texas HiLT Lab Denton TX 76203 USA

ISBN: (纸本)9781450347020

Attribute-based access control (ABAC) is a logical access control methodology where authorization to perform a set of operations is based on attributes of the user, the objects being accessed, the environment, and a number of other attribute sources that may be relevant to the current request. Once fully implemented within an enterprise, ABAC promotes information sharing while maintaining control of the information. However, the cost of developing ABAC policies can be a significant obstacle for organizations to migrate from traditional access control models to ABAC. Most organizations have high-level requirement specifications that define security policies and include a set of access control policies. Taking advantage of this rich source of information, we introduce a top-down policy engineering framework for ABAC that aims to automatically extract policies from unrestricted natural language documents and then, we present our methodology to extract policy related information using deep neural networks. We first create an annotated dataset comprised of 2660 sentences from real-world policy documents. We then train a deep recurrent neural network (RNN) to identify sentences containing access control policies (ACP) from irrelevant content. We applied the RNN to our new dataset as well as to five other, smaller datasets that have been employed in prior work on this task, and show that our model outperforms the state-of-the-art and leads to a performance improvement of 5.58% over the previously reported results.

关键词： access control policy attribute-based access control policy engineering recurrent neural network deep learning

来源：评论

学校读者我要写书评

暂无评论

FACT: Functionality-centric access control System for IoT Programming Frameworks 22

FACT: Functionality-centric Access Control System for IoT Pr...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Lee, Sanghak Choi, Jiwon Kim, Jihun Cho, Beumjin Lee, Sangho Kim, Hanjun Kim, Jong POSTECH Pohang South Korea Georgia Tech Atlanta GA USA

ISBN: (纸本)9781450347020

Improvement in the security and availability is important for the success of the Internet of Things (IoT). Given that recent IoT devices are likely to have multiple functionalities and support third-party applications, this goal becomes challenging to achieve. Through an in-depth investigation of existing IoT frameworks, we focused on two inherent security flaws in their design caused by their device-centric approaches: (1) coarse-grained access control and (2) lack of resource isolation. Because of the coarse-grained access control, IoT devices suffer from over-privileged applications. Furthermore, the lack of resource isolation allows the possibility of Denial-of-Service attacks. In this paper, we propose a functionality-centric approach to managing IoT devices, called FACT, which has two design goals, namely, the principle of least privilege and the availability in terms of device functionalities. FACT isolates each functionality of the device using Linux Containers and grants a subject the privilege to access for each required functionality. We provide the overall framework and detailed working procedures between components that constitute FACT. We built a prototype of FACT on IoTivity and show that it accomplishes secure and efficient linkages between applications and functionalities of IoT devices through analysis and experiments.

关键词： Internet of Things Functionality-centric access control Over-privileged application Denial-of-Service

来源：评论

学校读者我要写书评

暂无评论

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices 22

A Flexible Authorization Architecture for Systems of Interop...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Tasali, Qais Chowdhury, Chandan Vasserman, Eugene Y. Kansas State Univ Dept Comp Sci Manhattan KS 66506 USA

ISBN: (纸本)9781450347020

Robust authentication and authorization are vital to next-generation distributed medical systems - the Medical Internet of Oings (MIoT). However, there is yet no good authorization model for real-time multi-channel data from systems of heterogeneous devices providing multiple physiological parameters for clinicians who may change on a minute-by-minute basis. We present a flexible authorization architecture for interoperable medical systems, and an implementation and evaluation in the context of the Medical Device Coordination Framework (MDCF) high-assurance middleware. Our framework is based on the well-studied Attributed Based access control model, but we introduce a new method of attribute inheritance that provides more fine-grained access control, supporting multiple different authorization levels for multiple physiological data channels from the same device, and rich and expressive policy specification which facilitates plug-and-play connectivity of devices - most do not require pre-specification of individual permissions. Our architecture is standards-compliant and modular, using the eXtensible access control Markup Language (XacmL), and Axiomatics Language for Authorization (ALFA) for policy specification, and standalone authorization modules which can be integrated with other platforms such as OpenICE. We stress-test our implementation in a realistic distributed system configuration, and show that the unoptimized system introduces negligible network and storage overhead, and minimal memory and CPU overhead.

关键词： medical interoperability cps access control abac xacml miot authorization alfa

来源：评论

学校读者我要写书评

暂无评论

Enabling Data Sharing in Contextual Environments: Policy Representation and Analysis 22

Enabling Data Sharing in Contextual Environments: Policy Rep...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Karafili, Erisa Lupu, Emil C. Imperial Coll London 180 Queens Gate London SW7 2AZ England

ISBN: (纸本)9781450347020

Internet of Things environments enable us to capture more and more data about the physical environment we live in and about ourselves. The data enable us to optimise resources, personalise services and offer unprecedented insights into our lives. However, to achieve these insights data need to be shared (and sometimes sold) between organisations imposing rights and obligations upon the sharing parties and in accordance with multiple layers of sometimes conflicting legislation at international, national and organisational levels. In this work, we show how such rules can be captured in a formal representation called "Data Sharing Agreements". We introduce the use of abductive reasoning and argumentation based techniques to work with context dependent rules, detect inconsistencies between them, and resolve the inconsistencies by assigning priorities to the rules. We show how through the use of argumentation based techniques use-cases taken from real life application are handled flexibly addressing trade-offs between confidentiality, privacy, availability and safety.

关键词： Data Sharing Data access Usage control Cloud Policy Language Abductive Reasoning Argumentation Reasoning

来源：评论

学校读者我要写书评

暂无评论

A Framework for the Cryptographic Enforcement of Information Flow Policies 22

A Framework for the Cryptographic Enforcement of Information...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Alderman, James Crampton, Jason Farley, Naomi Royal Holloway Univ London Informat Secur Grp Egham TW20 0EX Surrey England

ISBN: (纸本)9781450347020

It is increasingly common to outsource data storage to untrusted, third party (e.g. cloud) servers. However, in such settings, low-level online reference monitors may not be appropriate for enforcing read access, and thus cryptographic enforcement schemes (CESs) may be required. Much of the research on cryptographic access control has focused on the use of specific primitives and, primarily, on how to generate appropriate keys and fails to model the access control system as a whole. Recent work in the context of role-based access control has shown a gap between theoretical policy specification and computationally secure implementations of access control policies, potentially leading to insecure implementations. Without a formal model, it is hard to (i) reason about the correctness and security of a CES, and (ii) show that the security properties of a particular cryptographic primitive are sufficient to guarantee security of the CES as a whole. In this paper, we provide a rigorous definitional framework for a CES that enforces read-only information flow policies (which encompass many practical forms of access control, including role-based policies). This framework (i) provides a tool by which instantiations of CESs can be proven correct and secure, (ii) is independent of any particular cryptographic primitives used to instantiate a CES, and (iii) helps to identify the limitations of current primitives (e.g. key assignment schemes) as components of a CES.

关键词： Cryptographic Enforcement Scheme Information Flow Policy access control Cryptography Key Assignment Scheme Attribute-based Encryption

来源：评论

学校读者我要写书评

暂无评论

Leveraging Hardware Isolation for Process Level access control & Authentication 22

Leveraging Hardware Isolation for Process Level Access Contr...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Haider, Syed Kamran Omar, Hamza Lebedev, Ilia Devadas, Srinivas van Dijk, Marten Univ Connecticut Storrs CT 06269 USA MIT Cambridge MA 02139 USA

ISBN: (纸本)9781450347020

Critical resource sharing among multiple entities in a processing system is inevitable, which in turn calls for the presence of appropriate authentication and access control mechanisms. Generally speaking, these mechanisms are implemented via trusted software "policy checkers" that enforce certain high level application-specific "rules" to enforce a policy. Whether implemented as operating system modules or embedded inside the application ad hoc, these policy checkers expose additional attack surface in addition to the application logic. In order to protect application software from an adversary, modern secure processing platforms, such as Intel's Software Guard Extensions (SGX), employ principled hardware isolation to offer secure software containers or enclaves to execute trusted sensitive code with some integrity and privacy guarantees against a privileged software adversary. We extend this model further and propose using these hardware isolation mechanisms to shield the authentication and access control logic essential to policy checker software. While relying on the fundamental features of modern secure processors, our framework introduces productive software design guidelines which enable a guarded environment to execute sensitive policy checking code - hence enforcing application control flow integrity - and afford flexibility to the application designer to construct appropriate high-level policies to customize policy checker software.

关键词： Hardware Isolation Secure Processors Program Authentication

来源：评论

学校读者我要写书评

暂无评论

Towards PII-based Multiparty access control for Photo Sharing in Online Social Networks 22

Towards PII-based Multiparty Access Control for Photo Sharin...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Vishwamitra, Nishant Li, Yifang Wang, Kevin Hu, Hongxin Caine, Kelly Ahn, Gail-Joon Clemson Univ Clemson SC 29631 USA Arizona State Univ Tempe AZ 85287 USA

ISBN: (纸本)9781450347020

The privacy control models of current Online Social Networks (OSNs) are biased towards the content owners' policy settings. Additionally, those privacy policy settings are too coarse-grained to allow users to control access to individual portions of information that is related to them. Especially, in a shared photo in OSNs, there can exist multiple Personally Identifiable Information (PII) items belonging to a user appearing in the photo, which can compromise the privacy of the user if viewed by others. However, current OSNs do not provide users any means to control access to their individual PII items. As a result, there exists a gap between the level of control that current OSNs can provide to their users and the privacy expectations of the users. In this paper, we propose an approach to facilitate collaborative control of individual PII items for photo sharing over OSNs, where we shift our focus from entire photo level control to the control of individual PII items within shared photos. We formulate a PII-based multiparty access control model to fulfill the need for collaborative access control of PII items, along with a policy specification scheme and a policy enforcement mechanism. We also discuss a proof-of-concept prototype of our approach as part of an application in Facebook and provide system evaluation and usability study of our methodology.

关键词： access control privacy PII multiparty online social networks

来源：评论

学校读者我要写书评

暂无评论

Multi-Layer Authorization Framework for a Representative Hadoop Ecosystem Deployment 22

Multi-Layer Authorization Framework for a Representative Had...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Gupta, Maanak Patwa, Farhan Benson, James Sandhu, Ravi Univ Texas San Antonio Inst Cyber Secur One UTSA Circle San Antonio TX 78249 USA Univ Texas San Antonio Dept Comp Sci One UTSA Circle San Antonio TX 78249 USA

ISBN: (纸本)9781450347020

Apache Hadoop is a predominant software framework to store and process vast amount of data, produced in varied formats. Data stored in Hadoop multi-tenant data lake often includes sensitive data such as social security numbers, intelligence sources and medical particulars, which should only be accessed by legitimate users. Apache Ranger and Apache Sentry are important authorization systems providing fine-grained access control across several Hadoop ecosystem services. In this paper, we provide a comprehensive explanation for the authorization framework offered by Hadoop ecosystem, incorporating core Hadoop 2.x native access control features and capabilities offered by Apache Ranger, with prime focus on data services including Apache Hive and Hadoop 2.x core services. A multi-layer authorization system is discussed and demonstrated, reflecting access control for services, data, applications and infrastructure resources inside a representative Hadoop ecosystem instance. A concrete use case is discussed to underline the application of aforementioned access control points. We use Hortonworks Hadoop distribution HDP 2.5 to exhibit this multi-layer access control framework.

关键词： access control Hadoop Ecosystem Big Data Data Lake Role Based Attributes Object Tags

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：