检索结果-内蒙古大学图书馆

12th Annual IEEE International Systems Conference (SYSCON)

作者： Elliott, Aaron Knight, Scott Royal Mil Coll Canada Kingston ON Canada

ISBN: (纸本)9781538636640

Role-Based Access Control (RBAC) has been a popular solution for securing information systems for more than two decades. The cloud computing model offers a cost effective alternative for large distributed organizations while presenting unique security challenges. This is an important concern for organizations who have significant investments in large RBAC implementations where hundreds of roles have been engineered to realize security policy and safeguard information assets. In this work, we demonstrate the general applicability of ORGODEX, validating this new alternative for engineering scalable access control solutions in the context of cloud computing. Assuming the duties of a Project Manager and security Architect, we use the ORGODEX model and methodology to collaboratively analyze roles, information, responsibilities and constraints within a multi-disciplinary project team. Next, we realize the deployment of a new shared software solution for two geographically distributed partner institutions. Finally, we publicize results in a comprehensible role and responsibility matrix, thereby facilitating the ongoing maintenance of both the software and authorization service models.

关键词： security models for cloud computing Access Control in Collaboration Environments Role Based Access Control Scalability Complexity Least privilege

来源：评论

学校读者我要写书评

暂无评论

Multi-tenancy authorization models for collaborative cloud services

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2015年第11期27卷 2851-2868页

作者： Tang, Bo Sandhu, Ravi Li, Qi Univ Texas San Antonio Inst Cyber Secur San Antonio TX 78249 USA Univ Texas San Antonio Dept Comp Sci San Antonio TX 78249 USA Tsinghua Univ Grad Sch Shenzhen Shenzhen 518055 Peoples R China

The cloud service model intrinsically caters to multiple tenants, most obviously not only in public clouds but also in private clouds for large organizations. Currently, most cloud service providers isolate user activities and data within a single tenant boundary with no or minimum cross-tenant interaction. It is anticipated that this situation will evolve soon to foster cross-tenant collaboration supported by Authorization as a Service. At present, there is no widely accepted model for cross-tenant authorization. Recently, Calero et al. informally presented a multi-tenancy authorization system (MTAS), which extends the well-known role-based access control model by building trust relations among collaborating tenants. In this paper, we formalize this MTAS model and propose extensions for finer-grained cross-tenant trust. We also develop an administration model for MTAS. We demonstrate the utility and practical feasibility of MTAS by means of an example policy specification in extensible access control markup language. To further test the metrics of the model, we develop a prototype system and conduct experiments on it. The result shows that the prototype has 12-ms policy decision overhead on average and is scalable. We anticipate that researchers will develop additional multi-tenant authorization models before eventual consolidation and convergence to standard industry practice. Copyright (c) 2014 John Wiley & Sons, Ltd.

关键词： security models for cloud computing access control in collaboration environments role-based access control reputation and trust fundamentals and frameworks for security in collaboration systems privacy protection for collaboration systems

来源：评论

学校读者我要写书评

暂无评论

Multi-tenancy authorization models for collaborative cloud services

Multi-tenancy authorization models for collaborative cloud s...

引用

International Conference on Collaboration Technologies and Systems (CTS)

ISBN: (纸本)9781467364027

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：