NDLI: On Risk in Access Control Enforcement

Please wait, while we are loading the content...

Distributed Intelligence: Trends in the Management of Complex Systems

A Flexible Authorization Architecture for Systems of Interoperable Medical Devices

FACT: Functionality-centric Access Control System for IoT Programming Frameworks

Attribute Expressions, Policy Tables and Attribute-Based Access Control

Poster: A Location-Privacy Approach for Continuous Queries

Leveraging Hardware Isolation for Process Level Access Control & Authentication

A Framework for the Cryptographic Enforcement of Information Flow Policies

Authorization Enforcement Detection

On the Satisfiability of Workflows with Release Points

Enabling Data Sharing in Contextual Environments: Policy Representation and Analysis

Uncoupling Biometrics from Templates for Secure and Privacy-Preserving Authentication

An Enforcement Model for Preventing Inference Attacks in Social Computing Platforms

A Datalog Framework for Modeling Relationship-based Access Control Policies

Poster: Design of an Anomaly-based Threat Detection & Explication System

Towards PII-based Multiparty Access Control for Photo Sharing in Online Social Networks

Multi-Layer Authorization Framework for a Representative Hadoop Ecosystem Deployment

A Secure Sum Protocol and Its Application to Privacy-preserving Multi-party Analytics

Mining Relationship-Based Access Control Policies

On Risk in Access Control Enforcement

Secure Pick Up: Implicit Authentication When You Start Using the Smartphone

Towards a Top-down Policy Engineering Framework for Attribute-based Access Control

Poster: Constrained Policy Mining in Attribute Based Access Control

Verifiable Assume-Guarantee Privacy Specifications for Actor Component Architectures

Provable Enforcement of HIPAA-Compliant Release of Medical Records Using the History Aware Programming Language

Security Analysis and Legal Compliance Checking for the Design of Privacy-friendly Information Systems

POSTER: Access Control Model for the Hadoop Ecosystem

NTApps: A Network Traffic Analyzer of Android Applications

A Distributed Multi-Authority Attribute Based Encryption Scheme for Secure Sharing of Personal Health Records

Poster: On the Safety and Efficiency of Virtual Firewall Elasticity Control

On Risk in Access Control Enforcement

Content Provider	ACM Digital Library
Author	Jaeger, Trent Petracca, Giuseppe Skalka, Christian Capobianco, Frank
Abstract	While we have long had principles describing how access control enforcement should be implemented, such as the reference monitor concept, imprecision in access control mechanisms and access control policies leads to risks that may enable exploitation. In practice, least privilege access control policies often allow information flows that may enable exploits. In addition, the implementation of access control mechanisms often tries to balance security with ease of use implicitly (e.g., with respect to determining where to place authorization hooks) and approaches to tighten access control, such as accounting for program context, are ad hoc. In this paper, we define four types of risks in access control enforcement and explore possible approaches and challenges in tracking those types of risks. In principle, we advocate runtime tracking to produce risk estimates for each of these types of risk. To better understand the potential of risk estimation for authorization, we propose risk estimate functions for each of the four types of risk, finding that benign program deployments accumulate risks in each of the four areas for ten Android programs examined. As a result, we find that tracking of relative risk may be useful for guiding changes to security choices, such as authorized unsafe operations or placement of authorization checks, when risk differs from that expected.
Starting Page	31
Ending Page	42
Page Count	12
File Format	PDF
ISBN	9781450347020
DOI	10.1145/3078861.3078872
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-06-07
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Access control enforcement Risk
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Efficient access enforcement in distributed role-based access control (RBAC) deployments

Specify and enforce the policies of quantified risk adaptive access control

Hardware-enhanced distributed access enforcement for role-based access control

An empirical assessment of approaches to distributed enforcement in role-based access control (RBAC)

Practical and efficient cryptographic enforcement of interval-based access control policies

Toward a model-driven access-control enforcement mechanism for pervasive systems

Access control enforcement in Named Data Networking

Access control enforcement on outsourced data ensuring privacy of access control policies

FENCE: continuous access control enforcement in dynamic data stream environments

On Risk in Access Control Enforcement

Similar Documents

Efficient access enforcement in distributed role-based access control (RBAC) deployments

Specify and enforce the policies of quantified risk adaptive access control

Hardware-enhanced distributed access enforcement for role-based access control

An empirical assessment of approaches to distributed enforcement in role-based access control (RBAC)

Practical and efficient cryptographic enforcement of interval-based access control policies

Toward a model-driven access-control enforcement mechanism for pervasive systems

Access control enforcement in Named Data Networking

Access control enforcement on outsourced data ensuring privacy of access control policies

FENCE: continuous access control enforcement in dynamic data stream environments

On Risk in Access Control Enforcement