检索结果-内蒙古大学图书馆

Anonymity in attribute-based access control: Framework and Metric

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2024年第1期21卷 463-475页

作者： Zhang, Runnan Liu, Gang Kang, Hongzhaoning Wang, Quan Wan, Bo Luo, Nan Xidian Univ Sch Comp Sci & Technol Xian 710071 Shaanxi Peoples R China Xidian Univ Guangzhou Inst Technol Xian 710071 Shaanxi Peoples R China Key Lab Smart Human Comp Interact & Wearable Techn Xian 710071 Shaanxi Peoples R China

Anonymous access is an effective method for preserving privacy in access control. This study assumes that anonymous access control requires both frameworks and policies. Numerous solutions have been proposed for anonymous access at the framework level. In this study, these solutions are analyzed and quantified using a unified attribute-based access control (ABAC) anonymous access reference framework. Anonymous access at the framework level is the first line of defense, and inappropriate policies may undermine subject anonymity. An anonymity metric is proposed at the policy level to prevent authorization authority from re-identification using specific attributes and policies. The anonymity metric evaluates the risk of re-identifying a subject due to inappropriate access requests, as well as subject attribute assignment schemes and policies. This study is the first to focus on anonymity at the policy level in ABAC. Furthermore, a formal definition of anonymity suitable for ABAC is proposed. The feasibility of the proposed anonymity metric is verified through simulations.

关键词： Anonymity metric anonymous access attribute-based access control re-identification

来源：评论

学校读者我要写书评

暂无评论

attribute-based access control for AWS Internet of Things and Secure Industries of the Future

引用

IEEE access 2021年 9卷 107200-107223页

作者： Bhatt, Smriti Pham, Thanh Kim Gupta, Maanak Benson, James Park, Jaehong Sandhu, Ravi Purdue Univ Dept Comp & Informat Technol W Lafayette IN 47907 USA Tennessee Technol Univ Dept Comp Sci Cookeville TN 38505 USA Univ Texas San Antonio Dept Comp Sci Inst Cyber Secur San Antonio TX 78249 USA Univ Alabama Dept Management Mkt & Informat Syst Huntsville AL 35899 USA

Internet of Things (IoT) is revolutionizing and enhancing the quality of human lives in every aspect. With a disruption of IoT devices and applications, attackers are leveraging weak authentication and access control mechanisms on these IoT devices and applications to gain unauthorized access on user devices and data and cause them harm. access control is a critical security mechanism to secure the IoT ecosystem which comprises cloud computing and edge computing services along with smart devices. Today major cloud and IoT service providers including Amazon Web Services (AWS), Google Cloud Platform (GCP), and Azure utilize some customized forms of Role-based access control (RBAC) model along with specific authorization policies enabled by policy-based access control models. To enable fine-grained access control and overcome limitations of existing access control models, there is an imminent need to develop a flexible and dynamic access control model for securing smart devices, data and resources in the cloud-enabled IoT architecture. In this paper, we develop a formal attribute-based access control (ABAC) model for AWS IoT by building upon and extending previously developed access control model for AWS IoT, known as AWS-IoTAC model. We demonstrate the applicability of our proposed model through an industrial IoT use case and its implementation in the AWS IoT platform. Our proposed fine grained model for AWS IoT incorporates its existing capabilities and introduces new attributes for IoT entities and attribute-based policies for enabling expressive access control in AWS IoT. We also evaluate the performance of our model on the AWS cloud and IoT platform with the future smart industries use-case to depict the feasibility of our model in a real-world platform.

关键词： Internet of Things access control Industries Cloud computing Computational modeling Data models Smart manufacturing Internet of Things smart industries future manufacturing access control security privacy digital twins attribute-based access control

来源：评论

学校读者我要写书评

暂无评论

Authentication-enabled attribute-based access control for smart homes

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2023年第2期22卷 479-495页

作者： Burakgazi Bilgen, Melike Abul, Osman Bicakci, Kemal TOBB Univ Econ & Technol Dept Comp Engn Ankara Turkey Istanbul Tech Univ Informat Inst Istanbul Turkey

Smart home technologies constantly bring significant convenience to our daily lives. Unfortunately, increased security risks accompany this convenience. There can be severe consequences when unauthorized or malicious users gain access to smart home devices. Therefore, dependable and comprehensive access control models are needed to address the security concerns. To this end, the attribute-based access control (ABAC) model is usually considered the most satisfactory access control model for running IoT applications. However, the uncertainty left with the authentication stage should be carried to the authorization policy specification. In this work, we extend the ABAC model by carrying the assurance level of user authentication obtained from biometric authentication systems for authorization. The extended ABAC model quantifies how far the authentication matching score is from the predefined threshold. This quantification serves as a regular attribute like others to define authorization policies. The novelty in this quantification is that it consults false matching rate and hence can easily normalize across wide range of biometric authentication devices and algorithms. As a result, the resulting access control policies are concise and easy to comprehend. Moreover, our model is fine-grained in that different access policies can be specified for each smart device functionality. This work also shows, through case studies, that the extended ABAC model is feasible and implementable in XACML language.

关键词： access control attribute-based access control Internet of Things False matching rate Smart home security

来源：评论

学校读者我要写书评

暂无评论

Enabling attribute-based access control in NoSQL Databases

引用

IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING 2023年第1期11卷 208-223页

作者： Gupta, Eeshan Sural, Shamik Vaidya, Jaideep Atluri, Vijayalakshmi Indian Inst Technol Dept Comp Sci & Engn Kharagpur 721302 W Bengal India Rutgers State Univ Comp Informat Syst Newark NJ 07102 USA Rutgers State Univ MSIS Dept Comp Informat Syst Newark NJ 07102 USA Rutgers State Univ Ctr Informat Management Integrat & Connect CIMIC Newark NJ 07102 USA

NoSQL databases are being increasingly used for efficient management of high volumes of unstructured data in applications like information retrieval, natural language processing, social computing, etc. However, unlike traditional databases, data protection measures such as access control for these databases are still in their infancy, which could lead to significant vulnerabilities and security/privacy issues as their adoption increases. attribute-based access control (ABAC), which provides a flexible and dynamic solution to access control, can be effective for mediating accesses in typical usage scenarios for NoSQL databases. In this paper, we propose a novel methodology for enabling ABAC in NoSQL databases. Specifically we consider MongoDB, which is one of the most popular NoSQL databases in use today. We present an approach to both specify ABAC access control policies and to enforce them when an actual access request has been made. MongoDB Wire Protocol is used for extracting and processing appropriate information from the requests. We also present a method for supporting dynamic access decisions using environmental attributes and handling of ad-hoc access requests through digitally signed user attributes. Results from an extensive set of experiments on the Enron corpus as well as on synthetically generated data demonstrate the scalability of our approach. Finally, we provide details of our implementation on MongoDB and share a Github repository so that any organization can download and deploy the same for enabling ABAC in their own MongoDB installations.

关键词： access control NoSQL databases Databases Servers Wires Protocols Organizations attribute-based access control NoSQL datastores MongoDB

来源：评论

学校读者我要写书评

暂无评论

Accountable privacy preserving attribute-based access control for cloud services enforced using blockchain

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2022年第3期21卷 489-508页

作者： Ghorbel, Amal Ghorbel, Mahmoud Jmaiel, Mohamed Univ Sfax ENIS ReDCAD Lab BP 1173 Sfax 3038 Tunisia Ctr Rech Numer Sfax Sfax 3021 Tunisia

When dealing with cloud services, there are important security requirements that are highly recommended to be achieved, notably, access control. Cloud services have provided several mechanisms based on traditional solutions for access management. All have ultimately failed as forgery-proof methods. Reality is a word replete with unauthorized access breaches. Therefore, the need for new grounds for robust access management in cloud services is still urgently needed. In this paper, we stand on the blockchain technology to introduce the BC-ABAC as a reliable, flexible, transparent, and fine-grained access control that preserves user identity privacy and ensures accountability. To show the feasibility of the solution, we developed a prototype on a permissioned blockchain and we conducted some experiments to measure the scalability of the solution. Finally, we give a threat model analysis.

关键词： Cloud services Blockchain access control attribute-based access control Data privacy Accountability

来源：评论

学校读者我要写书评

暂无评论

Smartaccess: attribute-based access control System for Medical Records based on Smart Contracts

引用

IEEE access 2022年 10卷 117836-117854页

作者： De Oliveira, Marcela Tuler Reis, Lucio Henrik Amorim Verginadis, Yiannis Mattos, Diogo Menezes Ferrazani Olabarriaga, Silvia Delgado Locat Univ Amsterdam Epidemiol & Data Sci Dept Amsterdam UMC NL-1105 AZ Amsterdam Netherlands Locat Univ Amsterdam Biomed Engn & Phys Dept Amsterdam UMC NL-1105 AZ Amsterdam Netherlands Univ Fed Fluminense MidiaCom TET PPGEET UFF BR-24020140 Niteroi RJ Brazil Athens Univ Econ & Business AUEB Sch Business Dept Business Adm Athens 10434 Greece Natl Tech Univ Athens NTUA Inst Commun & Comp Syst Athens 15780 Greece

Cross-organisation data sharing is challenging because all the involved organisations must agree on 'how' and 'why' the data is processed. Due to a lack of transparency, the organisations need to trust that others comply with the agreements and regulations. We propose to exploit blockchain and smart contracts technologies to define an attribute-based access control System for cross-organisation medical records sharing, coined Smartaccess. Smartaccess offers joint agreement over access policies and dynamic access control besides blockchain transparency and auditability. We leverage the attribute-based access control model to implement smart contracts. We deploy and test them on a private and permissioned blockchain, transforming the access control process into a distributed smart contract execution. This paper proposes the Smartaccess system and its application in two healthcare use cases. We introduce the threat model and perform a security analysis of the system. To demonstrate the feasibility of our proposal, we implement a proof-of-concept of the smart contracts, written in Solidity language, with a size-efficient policy representation, and analyse the complexity and scalability of the contracts' functions. Furthermore, we present performance results, measuring the latency and throughput of the transactions to execute the access control functions with different blockchain network consensus setups. We also compare the performance of the Smartaccess system against two open-source Solidity implementations of smart contract-based access control, Role-based access control and access control List. Finally, we discuss the strengths and drawbacks of our proposal. Smartaccess requires the overhead of a decentralised system, but the trade-off is transparency, regulation compliance and auditability for complex cross-organisation data sharing.

关键词： attribute-based access control blockchain cross-organisation security electronic medical records GDPR healthcare information system smart contracts

来源：评论

学校读者我要写书评

暂无评论

attribute-based access control for NoSQL Databases 21

Attribute-Based Access Control for NoSQL Databases

引用

11th ACM Conference on Data and Application Security and Privacy (CODASPY)

作者： Gupta, Eeshan Sural, Shamik Vaidya, Jaideep Atluri, Vijayalakshmi Indian Inst Technol Kharagpur W Bengal India Rutgers State Univ Newark NJ USA

ISBN: (纸本)9781450381437

NoSQL databases are gaining popularity in recent times for their ability to manage high volumes of unstructured data efficiently. This necessitates such databases to have strict data security mechanisms. attribute-based access control (ABAC) has been widely appreciated for its high flexibility and dynamic nature. We present an approach for integrating ABAC into NoSQL databases, specifically MongoDB, that typically only support Role-based access control (RBAC). We also discuss an implementation and performance results for ABAC in MongoDB, while emphasizing that it can be extended to other NoSQL databases as well.

关键词： attribute-based access control mongodb nosql databases

来源：评论

学校读者我要写书评

暂无评论

attribute-based access control scheme for data sharing on hyperledger fabric

引用

JOURNAL OF INFORMATION SECURITY AND APPLICATIONS 2022年 67卷

作者： Zhao, Xiaojie Wang, Shangping Zhang, Yaling Wang, Yu Xian Univ Technol Sch Comp Sci & Engn Xian Shaanxi Peoples R China

With the popularization of the IoT and big data, the application value of data has become increasingly prominent. Therefore, it is particularly important to ensure the legitimate use of privacy data in the process of data sharing through access control. Traditional schemes usually use a trusted central organization to implement access control. However, a fully trusted central organization does not exist, and the access process of centralized access control is also opaque. In order to solve these problems, in this paper, we propose a decentralized attribute-based and fine-grained access control scheme for data sharing on Hyperledger Fabric. Firstly, the encrypted data is stored on the InterPlanetary File System (IPFS) and the returned hash is saved in the blockchain, by virtue of the immutability of blockchain. Secondly, a decentralized fine-grained attribute-based access control through smart contracts to prevent unauthorized users from accessing data resource. Thirdly, the linear integer secret sharing algorithm is used to achieve symmetric key sharing among multiple attributes to ensure the security of the key. Finally, the security analysis of the proposed scheme and the performance evaluation using the Hyperledger Caliper tool show the feasibility and effectiveness of the new scheme.

关键词： Data sharing Hyperledger fabric Decentralized attribute-based access control Linear integer secret sharing

来源：评论

学校读者我要写书评

暂无评论

Securing Smart Home IoT Systems with attribute-based access control 2

Securing Smart Home IoT Systems with Attribute-Based Access ...

引用

Secure and Trustworthy Cyber-Physical Systems (SaT-CPS)

作者： Goyal, Gaurav Liu, Peng Sural, Shamik Indian Inst Technol Kharagpur W Bengal India Penn State Univ University Pk PA 16802 USA

ISBN: (纸本)9781450392297

Over the last few years, there has been an increased proliferation of IoT systems for smart homes, enabling owners to remotely manage a variety of devices and gadgets installed on their properties. This growth was made possible due to several innovative contributions from the industry in device & sensor technology, efficient networking protocols, as well as extensive deployment of cloud infrastructure, and the development of user-friendly smartphone applications. However, the security of such systems, especially controlled access to the devices and their functionality, is still lagging. There were some recent attempts to develop access control methods for smart home IoTs. While the solutions appear to be interesting, they either ignore the practical issues faced during real-world deployment in IoT systems or do not support fine-grained access control as required by such applications. In this paper, we show how the security of smart home IoT systems can be strengthened through the use of attribute-based access control, which has been considered due to its several distinct advantages including the ability to specify fine-grained security policies and consideration of environmental conditions for making access decisions. A prototype implementation of the proposed framework has been done in the SmartThings IoT platform. An extensive set of experiments show that the approach is quite promising.

关键词： attribute-based access control Home IoT Security Policy SmartThnigs IoT Cloud

来源：评论

学校读者我要写书评

暂无评论

Mining attribute-based access control Policies 1

引用

18th International Conference on Information Systems Security (ICISS)

作者： Davari, Maryam Zulkernine, Mohammad Queens Univ Sch Comp Kingston ON Canada

ISBN: (数字)9783031236907

ISBN: (纸本)9783031236891;9783031236907

The flexibility feature of attribute-based access control (ABAC) makes it a powerful access control model for supporting the authorization demands of complex and dynamic systems. However, the migration from traditional access control models to the ABAC model is challenging. One promising approach to ease the burden of policy migration is policy mining. This paper proposes a bottom-up policy mining approach to automatically extract policies by mining access logs. The approach also employs machine learning techniques to learn ABAC policies. Real and synthetic data sets are employed to evaluate the approach. The experimental results demonstrate that our approach can generate ABAC policy rules efficiently.

关键词： attribute-based access control Policy mining Constraints Separation of Duty constraints Machine learning

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：