检索结果-内蒙古大学图书馆

8th International Conference on Signal Processing and Communication Systems, (ICSPCS)

作者： Thatmann, Dirk Tech Univ Berlin Telekom Innovat Labs Serv Ctr Networking SNET D-10587 Berlin Germany

ISBN: (纸本)9781479952557

In certain business sectors adapting to modern and cost reducing technologies and service models can be still a challenge. This especially applies for health care related SME, such as hospitals, where cost reduction runs counter the need of being compliant to legal regulations and where the access control has to struggle against a diverse landscape of health care equipment accompanied by dynamic and complex role models. Outsourcing data storage and data processing seems not to reduce the complexity, rather bears the risks of reduced data availability, loss or abuse of data and can increase legal compliance risks and concerns. Since this applies for many SMEs, a common platform, such as an ecosystem, can help to lower the entrance barrier by regaining helpful management functionalities, standardized basic services and therefore push the adoption to modern cost reducing service consumption scenarios. In this paper a generic design pattern for realizing distributed authorization in an API ecosystem is presented. The pattern is applied within a research project, which aims to develop an ecosystem for trading and consuming services within demanding business sectors and reduce lock-in effects for both, service providers and consumers. The concept of distributed authorization is applied in a new complex multi entity use-case, where access policies for RESTful APIs can be designed flexible under consideration of service providers' and consumers' requirements which are enforced by a central trusted 3rd party provider.

关键词： application program interfaces authorisation API ecosystem SME access control complex multientity-driven API ecosystems data processing distributed authorization generic design pattern health care equipment hospitals outsourcing data storage trading authorization Contracts Ecosystems Logic gates Monitoring Servers authorization Application programming interfaces Ecosystem access control Logic gates Servers contract hospital Business sectors Commerce SUPERCONDUCTING MAGNETIC ENERGY STORAGE Automatic data processing data processing

来源：评论

学校读者我要写书评

暂无评论

WDAI: a simple World Wide Web distributed authorization infrastructure

引用

COMPUTER NETWORKS-THE INTERNATIONAL JOURNAL OF COMPUTER AND TELECOMMUNICATIONS NETWORKING 1999年第11-16期31卷 1599-1609页

作者： Kahan, J World Wide Web Consortium W3C INRIA F-38330 Montbonnot St Martin France

The World Wide Web (W3) has the potential to link different kinds of documents into hypertext collections and to distribute such collections among many document servers. distributed collections can bring forth new W3 applications in extranets and expand the concept of content reuse. However, they also bring new authorization problems, such as the need for coordinated user administration, user authentication, and revocation of rights. This paper proposes WDAI, a simple and general infrastructure for distributed authorization on the World Wide Web. Under WDAI, browsers and servers exchange authorization information using X.509v3-based authorization certificates. WDAI is designed to be open to a wide variety of security policies and, being compatible with existing W3 technology, can be implemented without modifying existing browsers. (C) 1999 Published by Elsevier Science B.V. All rights reserved.

关键词： World Wide Web distributed hypermedia security access control distributed authorization

来源：评论

学校读者我要写书评

暂无评论

Risk management for distributed authorization

引用

JOURNAL OF COMPUTER SECURITY 2007年第4期15卷 447-489页

作者： Skalka, Christian Wang, X. Chapin, Peter Univ Vermont Burlington VT USA

distributed authorization takes into account several elements, including certificates that may be provided by non-local actors. While most trust management systems treat all assertions as equally valid up to certificate authentication, realistic considerations may associate risk with some of these elements, for example some actors may be less trusted than others. Furthermore, practical online authorization may require certain levels of risk to be tolerated. In this paper, we introduce a trust management logic based on the system RT that incorporates formal risk assessment. This formalization allows risk levels to be associated with authorization, and authorization risk thresholds to be precisely specified and enforced. We also develop an algorithm for automatic authorization in a distributed environment, that is directed by risk considerations. A variety of practical applications are discussed.

关键词： distributed authorization trust management logic

来源：评论

学校读者我要写书评

暂无评论

DEAL: A distributed authorization Language for Ambient Intelligence

引用

INTERNATIONAL JOURNAL OF AMBIENT COMPUTING AND INTELLIGENCE 2011年第4期3卷 9-24页

作者： Genitsaridi, Irini Bikakis, Antonis Antoniou, Grigoris FORTH Inst Comp Sci Informat Syst Lab Iraklion Greece UCL Dept Informat Studies London England

authorization is an open problem in Ambient Intelligence environments. The difficulty of implementing authorization policies lies in the open and dynamic nature of such environments. The information is distributed among various heterogeneous devices that collect, process, change, and share it. Previous work presented a fully distributed approach for reasoning with conflicts in ambient intelligence systems. This paper extends previous results to address authorization issues in distributed environments. First, the authors present the formal high-level authorization language DEAL to specify access control policies in open and dynamic distributed systems. DEAL has rich expressive power by supporting negative authorization, rule priorities, hierarchical category authorization, and nonmonotonic reasoning. The authors then define the language semantics through Defeasible Logic. Finally, they demonstrate the capabilities of DEAL in a use case Ambient Intelligence scenario regarding a hospital facility.

关键词： Access Control Ambient Intelligence Conflict Resolution Contextual Reasoning distributed authorization Nonmonotonic Reasoning

来源：评论

学校读者我要写书评

暂无评论

Dominator-Tree Analysis for distributed authorization

Dominator-Tree Analysis for Distributed Authorization

引用

3rd ACM SIGPLAN Workshop on Programming Languages and Analysis for Security

作者： Mowbray, Miranda Lain, Antonio HP Labs Bristol Bristol Avon England

ISBN: (纸本)9781595939364

Practical analysis tools for distributed authorization need to answer quickly and accurately the question: who can access this resource? DAP (Delegation with Acyclic Paths) is it distributed authorization framework (introduced in [17]) that tries to inter-operate better with standard PKI mechanisms while retaining some of the benefits of new trust management schemes. DAP has an acyclicity requirement which makes it more difficult to answer the question quickly. In this paper we use a technique borrowed front compiler optimization, dominator-tree problem decomposition, to overcome this limitation of DAP with a fast heuristic. We show through simulation the heuristic's performance in a realistic federated resource management scenario. We also show how this heuristic can be complemented by clone-analysis techniques that exploit similarities between principals to further improve performance. We are currently using the heuristic and clone-analysis in practice in a design/analysis security tool.

关键词： access control dominator tree distributed authorization

来源：评论

学校读者我要写书评

暂无评论

PeerAccess: a logic for distributed authorization 05

PeerAccess: a logic for distributed authorization

引用

Proceedings of the 12th ACM conference on Computer and communications security

作者： Marianne Winslett Charles C. Zhang Piero A. Bonatti University of Illinois at Urbana-Champaign Urbana IL Università di Napoli FEDERICO II Napoli Italy

ISBN: (纸本)9781595932266

This paper introduces the PeerAccess framework for reasoning about authorization in open distributed systems, and shows how a parameterization of the framework can be used to reason about access to computational resources in a grid environment. The PeerAccess framework supports a declarative description of the behavior of peers that selectively push and/or pull information from certain other peers. PeerAccess local knowledge bases encode the basic knowledge of each peer (e.g., Alice's group memberships), its policies governing the release of each possible piece of information to other peers, and information that guides and limits its search process when trying to obtain particular pieces of information from other peers. PeerAccess proofs of authorization are verifiable and nonrepudiable, and their construction relies only on the local information possessed by peers and their parameterized behavior with respect to query answering, information push/pull, and information release policies (i.e., no omniscient viewpoint is required). We present the PeerAccess language and peer knowledge base structure, the associated formal semantics and proof theory, and examples of the use of PeerAccess in constructing proofs of authorization to access computational resources.

关键词： release policies distributed authorization P2P systems proof hints logical signature sticky policies

来源：评论

学校读者我要写书评

暂无评论

Trust but verify: authorization for web services

引用

COMPUTER SYSTEMS SCIENCE AND ENGINEERING 2006年第5期21卷 381-392页

作者： Skalka, C. Wang, X. Sean Univ Vermont Dept Comp Sci Burlington VT 05405 USA

Through web service technology, distributed applications can be built in an open and flexible manner, bringing tremendous power to applications on the web. However, this flexibility poses significant challenges to security. Traditional access control for distributed systems is not flexible and efficient enough in such an environment;in particular, fully secure online authorization decisions may be too inefficient in practice, requiring simplification which may have only an informal and unverifiable relation to fully secure authorization decisions. This paper introduces a trust-but-verify framework for web services authorization. In this framework, each web service maintains the usual access control policies, as well as a trust transformation policy, that formally species how to simplify full authorization into a more efficient form for online checking. This formalization allows certainty that offline checking verifies the trust relation between full security and online checking.

关键词： distributed authorization access control logic web services

来源：评论

学校读者我要写书评

暂无评论

xDomain: Cross-border Proofs of Access 09

xDomain: Cross-border Proofs of Access

引用

14th ACM Symposium on Access Control Models and Technologies

作者： Bauer, Lujo Jia, Limin Reiter, Michael K. Swasey, David Carnegie Mellon Univ Pittsburgh PA 15213 USA

ISBN: (纸本)9781605585376

A number of research systems have demonstrated the benefits of accompanying each request with a machine-checkable proof that the request complies with access-control policy - a technique called proof-carrying authorization. Numerous authorization logics have been proposed as vehicles by which these proofs can be expressed and checked. A challenge in building such systems is how to allow delegation between institutions that use different authorization logics. Instead of trying to develop the authorization logic that all institutions should use, we propose a framework for interfacing different, mutually incompatible authorization logics. Our framework provides a very small set of primitives that defines an interface for communication between different logics without imposing any fundamental constraints oil their design or nature. We illustrate by example that a variety of different logics can communicate over this interface, and show formally that supporting the interface does not impinge on the integrity of each individual logic. We also describe an architecture for constructing authorization proofs that contain components from different logics and report oil the performance of a prototype proof checker.

关键词： Logic-based access control trust management distributed authorization

来源：评论

学校读者我要写书评

暂无评论

HCAP: A History-Based Capability System for IoT Devices 18

HCAP: A History-Based Capability System for IoT Devices

引用

23rd ACM Symposium on Access Control Models and Technologies (SACMAT)

作者： Tandon, Lakshya Fong, Philip W. L. Safavi-Naini, Reihaneh Univ Calgary Calgary AB Canada

ISBN: (纸本)9781450356664

Permissions are highly sensitive in Internet-of-Things (IoT) applications, as IoT devices collect our personal data and control the safety of our environment. Rather than simply granting permissions, further constraints shall be imposed on permission usage so as to realize the Principle of Least Privilege. Since IoT devices are physically embedded, they are often accessed in a particular sequence based on their relative physical positions. Monitoring if such sequencing constraints are honoured when IoT devices are accessed provides a means to fence off malicious accesses. This paper proposes a history-based capability system, HCAP, for enforcing permission sequencing constraints in a distributed authorization environment. We formally establish the security guarantees of HCAP, and empirically evaluate its performance.

关键词： Internet of Things distributed authorization History-Based Access Control capability system formal verification safety liveness performance evaluation

来源：评论

学校读者我要写书评

暂无评论

authorization in trust management: Features and foundations

引用

ACM COMPUTING SURVEYS 2008年第3期40卷 79-126页

作者： Chapin, Peter C. Skalka, Christian Wang, X. Sean Univ Vermont Dept Comp Sci Burlington VT 05405 USA

Trust management systems are frameworks for authorization in modern distributed systems, allowing remotely accessible resources to be protected by providers. By allowing providers to specify policy, and access requesters to possess certain access rights, trust management automates the process of determining whether access should be allowed on the basis of policy, rights, and an authorization semantics. In this paper we survey modem state-of-the-art in trust management authorization, focusing on features of policy and rights languages that provide the necessary expressiveness for modem practice. We characterize systems in light of a generic structure that takes into account components of practical implementations. We emphasize systems that have a formal foundation, since security properties of them can be rigorously guaranteed. Underlying formalisms are reviewed to provide necessary background.

关键词： security design languages distributed authorization trust management systems

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：