检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

47 篇 会议

馆藏范围

47 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

40 篇 工学
- 40 篇 计算机科学与技术...
- 18 篇 电气工程
- 5 篇 软件工程
- 1 篇 控制科学与工程
- 1 篇 化学工程与技术
2 篇 理学
- 1 篇 数学
- 1 篇 化学
- 1 篇 系统科学
1 篇 管理学
- 1 篇 图书情报与档案管...

主题

20 篇 access control
6 篇 attribute-based ...
5 篇 internet of thin...
5 篇 policy mining
5 篇 xacml
5 篇 security
4 篇 abac
4 篇 big data
4 篇 privacy
3 篇 risk
2 篇 policy formalism
2 篇 deep learning
2 篇 context-aware ap...
2 篇 object tags
2 篇 data lake
2 篇 fuzzy inference
2 篇 access control p...
2 篇 relationship-bas...
2 篇 iot
2 篇 role based

机构

3 篇 purdue univ w la...
2 篇 arizona state un...
2 篇 clemson univ cle...
2 篇 rutgers state un...
2 篇 univ insubria di...
2 篇 iit kharagpur kh...
1 篇 penn state univ ...
1 篇 quantitat sci so...
1 篇 university of te...
1 篇 iit kharagpur kh...
1 篇 rutgers universi...
1 篇 purdue universit...
1 篇 postech pohang
1 篇 eindhoven univer...
1 篇 univ north texas...
1 篇 univ texas san a...
1 篇 univ chinese aca...
1 篇 imperial coll en...
1 篇 mitre corp burli...
1 篇 nokia bell labs ...

作者

3 篇 gupta maanak
3 篇 bertino elisa
3 篇 sandhu ravi
2 篇 colombo pietro
2 篇 zannone nicola
2 篇 patwa farhan
2 篇 takabi hassan
2 篇 vaidya jaideep
2 篇 atluri vijayalak...
2 篇 crampton jason
2 篇 hu hongxin
2 篇 ferrari elena
2 篇 ranise silvio
2 篇 sural shamik
2 篇 ahn gail-joon
1 篇 doyle jon
1 篇 kim jong
1 篇 choi jiwon
1 篇 han wonkyu
1 篇 gautam mayank

语言

47 篇 英文

检索条件"任意字段=Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies"

共 47 条记录，以下是31-40 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Poster: Towards Greater Expressiveness, Flexibility, and Uniformity in access control 23

Poster: Towards Greater Expressiveness, Flexibility, and Uni...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Jiang, Jiaming Chirkova, Rada Doyle, Jon Rosenthal, Arnon North Carolina State Univ Dept Comp Sci Raleigh NC 27695 USA Mitre Corp Burlington Rd Bedford MA 01730 USA

ISBN: (纸本)9781450356664

Attribute-based access control (ABAC) is a general access control model that subsumes numerous earlier access control models. Its increasing popularity stems from the intuitive generic structure of granting permissions based on application and domain attributes of users, subjects, objects, and other entities in the system. Multiple formal and informal languages have been developed to express policies in terms of such attributes. The utility of ABAC policy languages is potentially undermined without a properly formalized underlying model. The high-level structure in a majority of ABAC models consists of sets of tokens and sets of sets, expressions that demand that the reader unpack multiple levels of sets and tokens to determine what things mean. The resulting reduced readability potentially endangers correct expression, reduces maintainability, and impedes validation. These problems could be magnified in models that employ nonuniform representations of actions and their governing policies. We propose to avoid these magnified problems by recasting the high-level structure of ABAC models in a logical formalism that treats all actions (by users and others) uniformly and that keeps existing policy languages in place by interpreting their attributes in terms of the restructured model. In comparison to existing ABAC models, use of a logical language for model formalization, including hierarchies of types of entities and attributes, promises improved expressiveness in specifying the relationships between and requirements on application and domain attributes. A logical modeling language also potentially improves flexibility in representing relationships as attributes to support some widely used policy languages. Consistency and intelligibility are improved by using uniform means for representing different types of controlled actions-such as regular access control actions, administrative actions, and user logins-and their governing policies. Logical languages also provide a

关键词： Attribute-based access control security policy formalism logical models

来源：评论

学校读者我要写书评

暂无评论

Attribute Expressions, Policy Tables and Attribute-Based access control 22

Attribute Expressions, Policy Tables and Attribute-Based Acc...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Crampton, Jason Williams, Conrad Royal Holloway Univ London Egham Hill Egham TW20 0EX Surrey England

ISBN: (纸本)9781450347020

Attribute-based access control (ABAC) has attracted considerable interest in recent years, prompting the development of the standardized XML-based language XacmL. ABAC policies written in languages like XacmL have a tree-like structure, where leaf nodes are associated with authorization decisions and non-leaf nodes are associated with decision-combining algorithms. However, it may be difficult in XacmL to construct a given policy due to the tree-structured nature of XacmL and the way in which combining algorithms are defined. Furthermore, there is limited control over how requests are evaluated with respect to targets. In this paper, we introduce the notion of an attribute expression, which generalizes the notion of a target, and show how attribute expressions are used to specify policies in tabular form. We demonstrate why representing policies in this manner is convenient, intuitive and flexible for policy authors, and provide a method for automatically compiling policy tables into machine-enforceable policies. Thus, we bridge the gap between a policy representation that is convenient for end-users and a policy that can be enforced by a PDP. We then describe various methods to reduce the size of policy tables. In addition, we compare our language with XacmL, highlighting various shortcomings of XacmL and demonstrating how to express XacmL policies in a tabular form. We then show how policy tables can be used as leaf nodes in a tree-structured language, providing a modular method for constructing enterprise-wide policies. Finally, we show how attribute expressions and policy tables can be used to make role-based access control and access control lists "attribute-aware".

关键词： Attribute-based access control attribute expressions AEPL policy tables XacmL PTACL

来源：评论

学校读者我要写书评

暂无评论

A Deep Learning Approach for Extracting Attributes of ABAC Policies 18

A Deep Learning Approach for Extracting Attributes of ABAC P...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Alohaly, Manar Takabi, Hassan Blanco, Eduardo Univ North Texas Dept Comp Sci & Engn Denton TX 76203 USA Princess Nourah Bint Abdulrahman Univ Riyadh Saudi Arabia

ISBN: (纸本)9781450356664

The National Institute of Standards and Technology (NIST) has identified natural language policies as the preferred expression of policy and implicitly called for an automated translation of ABAC natural language access control policy (NLACP) to a machine-readable form. An essential step towards this automation is to automate the extraction of ABAC attributes from NLACPs, which is the focus of this paper. We, therefore, raise the question of: how can we automate the task of attributes extraction from natural language documents? Our proposed solution to this question is built upon the recent advancements in natural language processing and machine learning techniques. For such a solution, the lack of appropriate data often poses a bottleneck. Therefore, we decouple the primary contributions of this work into: (1) developing a practical framework to extract ABAC attributes from natural language artifacts, and (2) generating a set of realistic synthetic natural language access control policies (NLACPs) to evaluate the proposed framework. The experimental results are promising with regard to the potential automation of the task of interest. Using a convolutional neural network (CNN), we achieved - in average - an F1-score of 0.96 when extracting the attributes of subjects, and 0.91 when extracting the objects' attributes from natural language access control policies.

关键词： access control policy attribute based access control policy authoring natural language processing relation extraction deep learning

来源：评论

学校读者我要写书评

暂无评论

A Distributed Multi-Authority Attribute Based Encryption Scheme for Secure Sharing of Personal Health Records 22

A Distributed Multi-Authority Attribute Based Encryption Sch...

引用

22nd acm symposium on access control models and technologies (SacmAT)

作者： Pussewalage, Harsha S. Gardiyawasam Oleshchuk, Vladimir A. Univ Agder Dept ICT N-4898 Grimstad Norway

ISBN: (纸本)9781450347020

Personal health records (PHR) are an emerging health information exchange model, which facilitates PHR owners to efficiently manage their health data. Typically, PHRs are outsourced and stored in third-party cloud platforms. Although, outsourcing private health data to third party platforms is an appealing solution for PHR owners, it may lead to significant privacy concerns, because there is a higher risk of leaking private data to unauthorized parties. As a way of ensuring PHR owners' control of their outsourced PHR data, attribute based encryption (ABE) mechanisms have been considered due to the fact that such schemes facilitate a mechanism of sharing encrypted data among a set of intended recipients. However, such existing PHR solutions suffer from inflexibility and scalability issues due to the limitations associated with the adopted ABE mechanisms. To address these issues, we propose a distributed multi-authority ABE scheme and thereby we show how a patient-centric, attribute based PHR sharing scheme which can provide flexible access for both professional users such as doctors as well as personal users such as family and friends is realized. We have shown that the proposed scheme supports on-demand user revocation as well as secure under standard security assumptions. In addition, the simulation results provide evidence for the fact that our scheme can function efficiently in practice. Furthermore, we have shown that the proposed scheme can cater the access requirements associated with distributed multi-user PHR sharing environments as well as more realistic and scalable compared with similar existing PHR sharing schemes.

关键词： access control Attribute based encryption Security Personal health records

来源：评论

学校读者我要写书评

暂无评论

A lazy approach to access control as a service (ACaaS) for IoT: An AWS case study 18

A lazy approach to access control as a service (ACaaS) for I...

引用

23rd acm symposium on access control models and technologies, SacmAT 2018

作者： Ahmad, Tahir Morelli, Umberto Ranise, Silvio Zannone, Nicola Security and Trust Unit FBK-ICT Trento Italy DIBRIS University of Genova Italy Eindhoven University of Technology Netherlands

ISBN: (纸本)9781450356664

The Internet of Things (IoT) is receiving considerable attention from both industry and academia because of the new business models that it enables and the new security and privacy challenges that it generates. Major Cloud Service Providers (CSPs) have proposed platforms to support IoT by combining cloud and edge computing. However, the security mechanisms available in the cloud have been extended to IoT with some shortcomings with respect to the management and enforcement of access control policies. access control as a Service (ACaaS) is emerging as a solution to overcome these difficulties. The paper proposes a lazy approach to ACaaS that allows the specification and management of policies independently of the CSP while leveraging its enforcement *** demonstrate the approach by investigating (also experimentally) alternative deployments in the IoT platform offered by Amazon Web Services on a realistic smart lock solution. © 2018 Association for Computing Machinery.

关键词： Internet of things

来源：评论

学校读者我要写书评

暂无评论

proceedings of acm symposium on access control models and technologies, SacmAT

Proceedings of ACM Symposium on Access Control Models and Te...

引用

23rd acm symposium on access control models and technologies, SacmAT 2018

ISBN: (纸本)9781450356664

The proceedings contain 27 papers. The topics discussed include: automated coverage-based testing of XacmL policies;parametric RBAC maintenance via Max-SAT;independent key distribution protocols for broadcast authentication;self-generation of access control policies;multi-party access control: requirements, state of the art and open challenges;securing named data networks: challenges and the way forward;privacy-aware risk-adaptive access control in health information systems using topic models;a blockchain-based trust system for the internet of things;distributed usage control enforcement through trusted platform modules and SGX enclaves;my friend leaks my privacy: modeling and analyzing privacy in social networks;sensing or watching? balancing utility and privacy in sensing systems via collection and enforcement mechanisms;solving multi-objective workflow satisfiability problems with optimization modulo theories techniques;network policy enforcement using transactions: the neutron approach;a deep learning approach for extracting attributes of ABAC policies;mining positive and negative attribute-based access control policy rules;towards a privacy-aware qunatified self data management framework;access control in the era of big data: state of the art and research directions;and authorization framework for secure cloud assisted connected cars and vehicular Internet of Things.

关键词：

来源：评论

学校读者我要写书评

暂无评论

Automated Coverage-Based Testing of XacmL Policies 18

Automated Coverage-Based Testing of XACML Policies

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Xu, Dianxiang Shrestha, Roshan Shen, Ning Boise State Univ Dept Comp Sci Boise ID 83725 USA

ISBN: (纸本)9781450356664

While(1) the standard language XacmL is very expressive for specifying fine-grained access control policies, defects can get into XacmL policies for various reasons, such as misunderstanding of access control requirements, omissions, and coding errors. These defects may result in unauthorized accesses, escalation of privileges, and denial of service. Therefore, quality assurance of XacmL policies for real-world information systems has become an important issue. To address this issue, this paper presents a family of coverage criteria for XacmL policies, such as rule coverage, rule pair coverage, decision coverage, and Modified Condition/Decision Coverage (MC/DC). To demonstrate the assurance levels of these coverage criteria, we have developed methods for automatically generating tests, i.e., access requests, to satisfy the coverage criteria using a constraint solver. We have evaluated these methods through mutation analysis of various policies with different levels of complexity. The experiment results have shown that the rule coverage is far from adequate for revealing the majority of defects in XacmL policies, and that both MC/DC and decision coverage tests have outperformed the existing methods for testing XacmL policies. In particular, MC/DC tests achieve a very high level of quality assurance of XacmL policies.

关键词： XacmL access control coverage criteria test generation mutation testing

来源：评论

学校读者我要写书评

暂无评论

Administration in role-based access control 07

Administration in role-based access control

引用

2nd acm symposium on Information, Computer and Communications Security, ASIACCS '07

作者： Li, Ninghui Mao, Ziqing Center for Education and Research in Information Assurance and Security Department of Computer Science Purdue University West Lafayette IN 479072107 United States

ISBN: (纸本)1595935746

Administration of large-scale RBAC systems is a challenging open problem. We propose a principled approach in designing and analyzing administrative models for RBAC. We identify six design requirements for administrative models of RBAC. These design requirements are motivated by three principles for designing security mechanisms: (1) flexibility and scalability, (2) psychological acceptability, and (3) economy of mechanism. We then use these requirements to analyze several approaches to RBAC administration, including ARBAC97 [21, 23, 22], SARBAC [4, 5], and the RBAC system in the Oracle DBMS. Based on these requirements and the lessons learned in analyzing existing approaches, we design UARBAC, a new family of administrative models for RBAC that has significant advantages over existing models. Copyright 2007 acm.

关键词： access control

来源：评论

学校读者我要写书评

暂无评论

Authorization Framework for Secure Cloud Assisted Connected Cars and Vehicular Internet of Things 18

Authorization Framework for Secure Cloud Assisted Connected ...

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Gupta, Maanak Sandhu, Ravi Univ Texas San Antonio Dept Comp Sci ICS C SPECC San Antonio TX 78249 USA

ISBN: (纸本)9781450356664

Internet of Things has become a predominant phenomenon in every sphere of smart life. Connected Cars and Vehicular Internet of Things, which involves communication and data exchange between vehicles, traffic infrastructure or other entities are pivotal to realize the vision of smart city and intelligent transportation. Vehicular Cloud offers a promising architecture wherein storage and processing capabilities of smart objects are utilized to provide on-the-fly fog platform. Researchers have demonstrated vulnerabilities in this emerging vehicular IoT ecosystem, where data has been stolen from critical sensors and smart vehicles controlled remotely. Security and privacy is important in Internet of Vehicles (IoV) where access to electronic control units, applications and data in connected cars should only be authorized to legitimate users, sensors or vehicles. In this paper, we propose an authorization framework to secure this dynamic system where interactions among entities is not pre-defined. We provide an extended access control oriented (E-ACO) architecture relevant to IoV and discuss the need of vehicular clouds in this time and location sensitive environment. We outline approaches to different access control models which can be enforced at various layers of E-ACO architecture and in the authorization framework. Finally, we discuss use cases to illustrate access control requirements in our vision of cloud assisted connected cars and vehicular IoT, and discuss possible research directions.

关键词： access control Internet of Things Vehicular Internet of Things Connected Cars Vehicular Cloud Internet of Vehicles Big Data Attributes Based Trust Fog Computing Cloud Computing

来源：评论

学校读者我要写书评

暂无评论

Securing Named Data Networks: Challenges and the Way Forward 18

Securing Named Data Networks: Challenges and the Way Forward

引用

23rd acm symposium on access control models and technologies (SacmAT)

作者： Bertino, Elisa Nabeel, Mohamed Purdue Univ W Lafayette IN 47907 USA Qatar Comp Res Inst Doha Qatar

ISBN: (纸本)9781450356664

Despite decades of research on the Internet security, we constantly hear about mega data breaches and malware infections affecting hundreds of millions of hosts. The key reason is that the current threat model of the Internet relies on two assumptions that no longer hold true: (1) Web servers, hosting the content, are secure, (2) each Internet connection starts from the original content provider and terminates at the content consumer. Internet security is today merely patched on top of the TCP/IP protocol stack. In order to achieve comprehensive security for the Internet, we believe that a clean-slate approach must be adopted where a content based security model is employed. Named Data Networking (ndN) is a step in this direction which is envisioned to be the next generation Internet architecture based on a content centric communication model. ndN is currently being designed with security as a key requirement, and thus to support content integrity, authenticity, confidentiality and privacy. However, in order to meet such a requirement, one needs to overcome several challenges, especially in either large operational environments or resource constrained networks. In this paper, we explore the security challenges in achieving comprehensive content security in ndN and propose a research agenda to address some of the challenges.

关键词： Named Data Networks Edge Computing access control Security Confidentiality Integrity Privacy

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共5页 << < 1 2 3 4 5 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：