检索结果-内蒙古大学图书馆

C-FAR: A Compositional Framework for anomaly resolution in Intelligent Transportation Systems

IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS 2023年第1期24卷 1015-1024页

作者： Kumar, Pavana Pradeep Kant, Krishna Pal, Amitangshu Temple Univ Dept Comp & Informat Sci Philadelphia PA 19122 USA Indian Inst Technol Kanpur Comp Sci & Engn Kanpur 208016 Uttar Pradesh India

In this paper, we present C-FAR, a framework for reasoning about anomalies in road-based intelligent transportation systems (ITS) based on video monitoring by the roadside camera infrastructure. The anomalies could span broad temporal and spatial ranges, including fine-grain (e.g., unsafe interactions among moving vehicles in real-time), medium-grain (e.g., aggressive/unsafe driving styles of individual vehicles over extended periods/distances), and coarse-grain (e.g., ensemble properties of the traffic over even longer time horizons). Unlike traditional approaches that utilize deep learning to recognize individual activities, C-FAR does so only for primitive movements and activities and then builds a comprehensive event logic framework. It also provides an optimal resolution of the detected/predicted anomalies by identifying the minimal changes in the controllable parameters of the system. We implemented a prototype system and tested it on three distinct real-world traffic data sets. We demonstrate that the proposed scheme can predict anomalies with over 84% recall level at 95% confidence level approximately 4.05 seconds before the incident.

关键词： Roads Deep learning anomaly detection Monitoring Calculus Safety Intelligent transportation systems Intelligent transportation systems anomaly detection and resolution satisfiability modulo theories event logic combinatorial optimization

来源：评论

学校读者我要写书评

暂无评论

Policy Modeling and anomaly detection in ABAC Policies 16th

Policy Modeling and Anomaly Detection in ABAC Policies

引用

16th International Conference on Risks and Security of Internet and Systems (CRiSIS)

作者： Davari, Maryam Zulkernine, Mohammad Queens Univ Sch Comp Kingston ON Canada

ISBN: (纸本)9783031020674;9783031020667

Sensitive data is available online through web and distributed protocols that highlight the need for access control mechanisms. System designers write access control policies to represent conditions on accessing data. Access control policies can contain anomalies (redundancy, inconsistency, irrelevancy, and incompleteness) that can lead to security vulnerabilities. Detecting anomalies in large and complex policies is challenging due to the lack of effective analysis mechanisms and tools. In this paper, we introduce a formal tree-based policy modeling technique to represent, update, and analyze access control policies. Based on the proposed formal policy modeling, we propose an anomaly detection technique. Our approach focuses on Attribute Based Access Control (ABAC) policies as they are widely adopted. Also, they can provide high flexibility and enhance security and information sharing. The effectiveness of our policy modeling and anomaly detection technique has been demonstrated through experimental evaluation.

关键词： Access control policies Security Attribute based access control Policy modeling Policy anomalies anomaly detection and resolution

来源：评论

学校读者我要写书评

暂无评论

Managing Security Policies within Cloud Environments Using Aspect-Oriented State Machines 2

Managing Security Policies within Cloud Environments Using A...

引用

2nd International Conference on Advanced Communication Technologies and Networking (CommNet)

作者： Ayache, Meryeme Khoumsi, Ahmed Erradi, Mohammed Mohammed V Univ Rabat ENSIAS Rabat Morocco Univ Sherbrooke Dept Elect & Comp Engn Sherbrooke PQ Canada

ISBN: (纸本)9781538683170

Cloud Computing is the most suitable environment for the collaboration of multiple organizations via its multi-tenancy architecture. However, due to the distributed management of policies within these collaborations, they may contain several anomalies, such as conflicts and redundancies, which may lead to both safety and availability problems. On the other hand, current cloud computing solutions do not offer verification tools to manage access control policies. In this paper, we propose a cloud policy verification service (CPVS), that facilitates to users the management of there own security policies within Openstack cloud environment. Specifically, the proposed cloud service offers a policy verification approach to dynamically choose the adequate policy using Aspect-Oriented Finite State Machines (AO-FSM), where pointcuts and advices are used to adopt Domain-Specific Language (DSL) state machine artifacts. The pointcuts define states' patterns representing anomalies (e.g., conflicts) that may occur in a security policy, while the advices define the actions applied at the selected pointcuts to remove the anomalies. In order to demonstrate the efficiency of our approach, we provide time and space complexities. The approach was implemented as middleware service within Openstack cloud environment. The implementation results show that the middleware can detect and resolve different policy anomalies in an efficient manner.

关键词： XACML policies security policies anomalies anomaly detection and resolution aspect-oriented finite state machines Cloud Computing

来源：评论

学校读者我要写书评

暂无评论

Validation and Correction of Large Security Policies: A Clustering and Access Log Based Approach

Validation and Correction of Large Security Policies: A Clus...

引用

IEEE International Conference on Big Data (Big Data)

作者： El Hadj, Maryem Ait Erradi, Mohammed Khoumsi, Ahmed Benkaouz, Yahya Mohammed V Univ Rabat ENSIAS Rabat Morocco Univ Sherbrooke Dept Elect & Comp Engn Sherbrooke PQ Canada Mohammed V Univ Rabat Concept & Syst Lab FSR Rabat Morocco

ISBN: (纸本)9781538650356

In big data environments with big number of users and high volume of data, we need to manage the corresponding huge number of security policies. Due to the distributed management of these policies, they may contain several anomalies, such as conflicts and redundancies, which may lead to both safety and availability problems. The distributed systems guided by such security policies produce a huge number of access logs. Due to potential security breaches, the access logs may show the presence of non-allowed accesses. This may also be a consequence of conflicting rules in the security policies. In this paper, we present an ongoing work on developing an environment for verifying and correcting security policies. To make the approach efficient, an access log is used as input to determine suspicious parts of the policy that should be considered. The approach is also made efficient by clustering the policy and the access log and considering separately the obtained clusters. The clustering technique and the use of access log significantly reduces the complexity of the suggested approach, making it scalable for large amounts of data.

关键词： ABAC Policy Access Log Clustering anomaly detection and resolution Policy Validation and Correction

来源：评论

学校读者我要写书评

暂无评论

Formal representation of conflict zones in XACML access control systems

Formal representation of conflict zones in XACML access cont...

引用

IEEE Colloquium on Information Science and Technology (CIST)

作者： Yahiaoui, Mohamed Zinedine, Ahmed Harti, Mostafa Sidi Mohamed Ben Abdellah Univ Fac Sci Dhar EI Mahrez POB 1796 Atlas Fes Morocco

ISBN: (纸本)9781467327251

In this work we propose a new approach for handling the problem of detection and resolution of conflicts/anomalies between XACML (eXtensible Access Control Markup Language) policies. We give more attention to the mathematical formalism of the problem. We introduce the notion of the canonical representation of the query space. This is a partition of the query space formed by authorization classes. Each authorization class regroups queries that are intercepted by the same policies. This classification provides a natural way to handle interferences between policy targets (in other words conflicts /anomalies). Then we bring the study of the problem from the whole query space to elements of its canonical representation. After, we study the impact of adding and deleting policies from the policy repository on the canonical representation. This is important when this canonical representation is integrated as a part of a Framework for conflict detection and resolution in XACML access control systems.

关键词： access control XACML policy anomaly conflict anomaly detection and resolution FIA algebra canonical representation

来源：评论

学校读者我要写书评

暂无评论

GPS III system operations concepts

GPS III system operations concepts

引用

IEEE Position Location and Navigation Symposium

作者： Luba, O Boyd, L Gower, A Crum, J Lockheed Martin Corporation United States Infinity Systems Engineering United States

ISBN: (纸本)0780384164

Over the past 3 years, the Lockheed Martin GPS III team has analyzed potential operational concepts for the Air Force. The completed tasks support the government's objective of a "realizable and operationally feasible" U.S. Strategic Command (USSTRATCOM) and Air Force Space Command (AFSPC) concept of operations. This paper provides an overview of the operational improvements for command and control of satellites and the provision of safe, precise navigation and timing services to end-users. The GPS III system changes existing operational paradigms. Improved operator capabilities are enabled by a new high-speed uplink/downlink and crosslink communication architecture. Continuous connectivity allows operators a "contact one satellite - contact all satellites" concept enabling near-real time navigation updates and telemetry monitoring. This paper describes potential improvements for the following operations: Constellation Monitoring, Command and Control, Navigation Upload Monitoring, Global Service Monitoring, Global Service Prediction, Civilian Navigation (CNAV) Messaging, and anomaly detection and resolution. This paper also describes future operational improvements as GPS applications continue to proliferate and the need for an improved infrastructure to effectively manage all the systems that affect GPS service grows.

关键词： Global Positioning System inertial navigation telemetry command and control systems satellite tracking synchronisation GPS III system operations concepts command and control satellites precise navigation timing services crosslink communication architecture uplink/downlink Constellation Monitoring Global Service Monitoring Global Service Prediction Civilian Navigation Messaging anomaly detection and resolution Command and control systems Global Positioning Systems Precise navigation command and control satellites INERTIAL NAVIGATION telemetry satellite tracking

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：