检索结果-内蒙古大学图书馆

Assessment Framework for the Identification and Evaluation of Main Features for distributed usage control Solutions

ACM TRANSACTIONS ON PRIVACY AND SECURITY 2023年第1期26卷 1-28页

作者： Gil, Gonzalo Arnaiz, Aitor Higuero, Marivi Diez, Francisco Javier TEKNIKER Basque Res & Technol Alliance BRTA Inaki Goenaga 5 Eibar 20600 Spain Escuela Ingn Bilbao Plaza Ingn Torres Quevedo 1 Bilbao 48013 Spain

Data exchange between organizations is becoming an increasingly significant issue due to the great opportunities it presents. However, there is great reluctance to share if data sovereignty is not provided. Providing it calls for not only access control but also usage control implemented in distributed systems. Access control is a research field where there has been a great deal of work, but usage control, especially implemented in distributed systems as distributed usage control (DUC), is a very new field of research that presents great challenges. Moreover, little is known about what challenges must really be faced and how they must be addressed. This is evidenced by the fact that existing research has focused non-specifically on different features of DUC, which are not formalized. Therefore, the path for the development of DUC solutions is unclear and it is difficult to analyze the scope of data sovereignty attained by the wide range of DUC solutions. In this context, this article is based on an initial in-depth analysis of DUC related work. In it, the challenges posed by DUC in terms of data sovereignty and the features that must be provided to address them are identified and analyzed for the first time. Based on these features, an initial DUC framework is proposed to assess in a practical and unified way the extent to which DUC solutions provide data sovereignty. Finally, the assessment framework is applied to compare the scopes of the most widespread DUC solutions and identify their limitations.

关键词： Data exchange data sovereignty distributed usage control IDSA UPL MYDATA LUCON

来源：评论

学校读者我要写书评

暂无评论

Context-Aware Policy Analysis for distributed usage control

引用

ENERGIES 2022年第19期15卷 7113页

作者： Gil, Gonzalo Arnaiz, Aitor Higuero, Marivi Javier Diez, Francisco Jacob, Eduardo Basque Res & Technol Alliance BRTA Inaki Goenaga 5 Eibar 20600 Spain Escuela Ingn Bilbao Plaza Ingeniero Torres Quevedo 1 Bilbao 48013 Spain

To boost data spaces and benefit from the great opportunities that they present, data sovereignty must be provided by distributed usage control (DUC). Assuming that DUC will be managed by implementing and enforcing policies, notable efforts have already been undertaken in the context of Access control (AC) regarding policy analysis due to the impact of low-quality policies on security. In this regard, this paper proposes that policy analysis in the DUC context should be understood as an extension of the AC, which is further affected by other challenging features, chief among which are context-aware control and extended control through action requirements. This paper presents a novel Context-Aware Policy Analysis (CAPA) algorithm for detecting inconsistencies and redundancies for DUC policies by supporting a large set of heterogeneous conditions. In this regard, the dependent relationship of conditions is formulated which will lead to more efficient conflict detection. By implementing this concept, a novel tree structure that combines a resource and a policy structure is presented to search for and compare relevant rules from policies. Built on the tree structure and through the formalization of rule conflicts, CAPA is developed and the security and performance it provides is tested in a wind energy use case.

关键词： data sovereignty distributed usage control policy quality energy data conditions

来源：评论

学校读者我要写书评

暂无评论

Quantifying Trustworthiness in Decentralized Trusted Applications 2

Quantifying Trustworthiness in Decentralized Trusted Applica...

引用

Secure and Trustworthy Cyber-Physical Systems (SaT-CPS)

作者： Wagner, Paul Georg Beyerer, Juergen Karlsruhe Inst Technol Karlsruhe Germany Fraunhofer Inst Optron Syst Technol & Image Explo Karlsruhe Germany

ISBN: (纸本)9781450392297

Decentralized systems play an important role in many modern data processing applications. Due to the distributed nature of these applications, participating system components are often operated by different stakeholders with potentially conflicting interests. To prevent malicious participants from manipulating critical system components, trusted computing technologies such as Trusted Platform Modules (TPMs) or Intel's Software Guard Extensions (SGX) can be employed. These technologies provide hardware-based access control to sensitive data and allow users to remotely verify the integrity of critical software stacks. However, not all trusted computing technologies are equally suitable for all use cases. As different technologies offer different benefits and drawbacks, it becomes quite challenging to determine if the decentralized system can be fully trusted in its current state. In this work we present a methodology for estimating the trustworthiness of decentralized systems that are being protected by trusted computing hardware. Our approach is based on a formal model describing the operational dependencies between distributed system components, as well as the required protection goals for a secure component operation. Based on this model we then show how stakeholders can calculate the trustworthiness of a specific system operation as a subjective probability (degree-of-belief). We then generalize this approach to obtain trust estimations for the entire decentralized system. Finally we demonstrate the application of our proposal using the real-world scenario of distributed usage control as an example.

关键词： trust metrics trusted computing trustworthiness trusted platform modules software guard extensions arm trustzone decentralized systems distributed usage control

来源：评论

学校读者我要写书评

暂无评论

Towards a policy enforcement infrastructure for distributed usage control 12

Towards a policy enforcement infrastructure for distributed ...

引用

17th ACM Symposium on Access control Models and Technologies, SACMAT'12

作者： Kelbert, Florian Pretschner, Alexander Karlsruhe Institute of Technology Am Fasanengarten 5 Karlsruhe Germany

ISBN: (纸本)9781450312950

distributed usage control is concerned with how data may or may not be used after initial access to it has been granted and is therefore particularly important in distributed system environments. We present an application- and application-protocol-independent infrastructure that allows for the enforcement of usage control policies in a distributed environment. We instantiate the infrastructure for transferring files using FTP and for a scenario where smart meters are connected to a Facebook application. Copyright 2012 ACM.

关键词： distributed usage control policy enforcement sticky policies security and privacy

来源：评论

学校读者我要写书评

暂无评论

Building Blocks for Identity Management and Protection for Smart Environments and Interactive Assistance Systems 18

Building Blocks for Identity Management and Protection for S...

引用

11th ACM International Conference on Pervasive Technologies Related to Assistive Environments (PETRA)

作者： Birnstill, Pascal Beyerer, Juergen Fraunhofer IOSB Karlsruhe Germany

ISBN: (纸本)9781450363907

Interactive environments are more and more entering our daily life. Our homes are becoming increasingly smart and so do our working environments. Aiming to provide assistance that is not only suitable to the current situation, but as well for the involved individuals usually comes along with an increased scale of personal data being collected/requested and processed. While this may not be exceptionally critical as long as data does not leave one's smart home, circumstances change dramatically once smart home data is processed by cloud services, and, all the more, as soon as an interactive assistance system is operated by our employer who may have interest in exploiting the data beyond its original purpose, e. g. for secretly evaluating the work performance of his personnel. In this paper we discuss how a federated identity management could be augmented with distributed usage control and trusted computing technology so as to reliably arrange and enforce privacy-related requirements in externally operated interactive environments.

关键词： Interactive Environments Smart Assistance Systems Identity Management distributed usage control Trusted Reference Monitor Trusted Platform Module Remote Attestation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：