NDLI: Cost-effective enforcement of UCONA policies

Please wait, while we are loading the content...

2013 International Conference on Risks and Security of Internet and Systems (CRiSIS)

2012 7th International Conference on Risks and Security of Internet and Systems (CRiSIS)

2011 6th International Conference on Risks and Security of Internet and Systems (CRiSIS)

Foreword

CRiSIS 2011 conference organization

Optimal voting strategy against rational attackers

A security mechanism to increase confidence in m-transactions

ADSR: Authenticated DSR

An energy and memory-efficient key management scheme for mobile heterogeneous sensor networks

Performance improvements for SHA-3 finalists by exploiting microcontroller on-chip parallelism

Trust based interdependency weighting for on-line risk monitoring in interdependent critical infrastructures

A trust model for capability delegation in federated policy systems

QoS-aware firewall session table

SEWSEC: A Secure Web Service Composer using Information Flow Control

Cost-effective enforcement of UCONA policies

A hierarchy of knowledge for the formal analysis of security-sensitive business processes

New framework for policy support for Mobile Grid Services

On the security of the terminal operations for container shipping in multimodal transport: The SIS-TEMA project

Operational security assurance evaluation in open infrastructures

Behaviour-based virus detection system using Interval Temporal Logic

2010 Fifth International Conference on Risks and Security of Internet and Systems (CRiSIS)

2009 Fourth International Conference on Risks and Security of Internet and Systems (CRiSIS 2009)

2008 Third International Conference on Risks and Security of Internet and Systems

Cost-effective enforcement of UCONA policies

Content Provider	IEEE Xplore Digital Library
Author	Krautsevich, L. Lazouski, A. Martinelli, F. Yautsiukhin, A.
Copyright Year	2011
Description	Author affiliation: Department of Computer Science, University of Pisa, Largo B. Pontecorvo 3, Italy (Krautsevich, L.) \|\| Istituto di Informatica e Telematica, Consiglio Nazionale delle Ricerche, G. Moruzzi 1, Pisa, Italy (Lazouski, A.; Martinelli, F.; Yautsiukhin, A.)
Abstract	In Usage CONtrol (UCON) access decisions rely on mutable attributes. A reference monitor should re-evaluate security policies each time when attributes change their values. Catching timely all attribute changes is a challenging issue, especially if the attribute provider and the reference monitor reside in different security domains. Some attribute changes might be missed, corrupted, and delayed. As a result, the reference monitor may erroneously grant the access to malicious users and forbid it for eligible users. This paper proposes a set of policy enforcement models which help to tolerate uncertainties associated with mutable attributes. In our model the reference monitor as usually evaluates logical predicates over attributes and additionally makes some estimates on how much observed attribute values differ from the real state of the world. The final access decision counts both factors. We assign monetary outcomes for granting and revoking access to legitimate and malicious users and compare the proposed policy enforcement models in terms of cost-efficiency.
Starting Page	1
Ending Page	8
File Size	235835
Page Count	8
File Format	PDF
ISBN	9781457718908
e-ISBN	9781457718915
e-ISBN	9781457718892
DOI	10.1109/CRiSIS.2011.6061833
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-09-26
Publisher Place	Romania
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authorization Uncertainty Computational modeling Usage Control Mutable Attribute Markov Chain Markov processes Policy Enforcement Cost Monitoring
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Cost-Effective Enforcement of Access and Usage Control Policies Under Uncertainties

A usage-based authorization framework for collaborative computing systems (2006)

ABSTRACT A Usage-based Authorization Framework for Collaborative Computing Systems

Integration of Quantitative Methods for Risk Evaluation within Usage Control Policies

xDUCON: Coordinating Usage Control Policies in Distributed Domains

Towards a policy enforcement infrastructure for distributed usage control

A Usage Control Based Architecture for Cloud Environments

A CUSUM Chart for Monitoring an Attribute Event

An agent-based approach for policy enforcement in secure workflow systems

Cost-effective enforcement of UCONA policies

Similar Documents

Cost-Effective Enforcement of Access and Usage Control Policies Under Uncertainties

A usage-based authorization framework for collaborative computing systems (2006)

ABSTRACT A Usage-based Authorization Framework for Collaborative Computing Systems

Integration of Quantitative Methods for Risk Evaluation within Usage Control Policies

xDUCON: Coordinating Usage Control Policies in Distributed Domains

Towards a policy enforcement infrastructure for distributed usage control

A Usage Control Based Architecture for Cloud Environments

A CUSUM Chart for Monitoring an Attribute Event

An agent-based approach for policy enforcement in secure workflow systems

Cost-effective enforcement of UCONA policies