Fuzzy Multi-Level Security: An experiment on quantified risk-adaptive access control

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2007, Pages 222-227

  Cheng, Pau Chen ^a   Rohatgi, Pankaj ^a   Keser, Claudia ^a   Karger, Paul A ^a   Wagner, Grant M ^b   Reninger, Angela Schuett ^b  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b ARMED FORCES INSTITUTE OF PATHOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; DATA TRANSFER; FUZZY SYSTEMS; MATHEMATICAL MODELS; RISK ANALYSIS; UNCERTAINTY ANALYSIS;

FUZZY LOGIC CONTROL SYSTEMS;

FUZZY LOGIC;

EID: 34548769351     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2007.21     Document Type: Conference Paper

References (13)

1. D. E. Bell and L. J. LaPadula. Computer Security Model: Unified Exposition and Multics Interpretation. Technical Report ESD-TR-75-306, The MITRE Corporation, Bedford, MA. HQ Electronic Systems Division, Hanscom AFB, MA, March 1976. http://csrc.nist.gov/publications/history/bell76.pdf.
2. D. Brewer and M. Nash. The Chinese Wall Security Policy. In IEEE Symposium on Security and Privacy, pages 206-214, 1989. Oakland, California.
3. P.-C. Cheng, P. Rohatgi, C. Keser, P. A. Karger, G. M. Wagner, and A. S. Reninger. Fuzzy Multi-Level Security: An Experiment on Quantified Risk-Adaptive Access Control, 2007. IBM Research Report RC24190.
4. N. Dimmock, J. Bacon, D. Ingram, and K. Moody. Risk Models for Trust-Based Access Control (TBAC). In the Third Annual Conference on Trust Management (iTrust 2005). Springer-Verlag, May 2005.
5. INFORMATION SECURITY PROGRAM, DOD 5200.1-R, US Department of Defense, January 1997. http://www.fas.org/irp/doddir/dod/5200-1r/.
6. F. A. Hayek. The Use of Knowledge in Society. American Economic Review, 30:519-530, 1945.
7. Security for IBM System S, 2006. http://domino.research.ibm.com/comm/ research.projects.nsf/pages/system_s_security.index.html.
8. M. C. Jason Prograrm Office. HORIZONTAL INTEGRATION: Broader Access Models for Realizing Information Dominance, JSR-04-132, December 2004. http://www.fas.org/irp/agency/dod/jason/classpol.pdf.
9. Jyh-Shing Roger Jang and Chuen-Tsai Sun and Eiji Mizutani. Neuro-Fuzzy AND Soft Computing: A Computational Approach to Learning and Machine Intelligence. Prentice Hall, 1997. ISBN 0-13-261066-3.
10. P. McDaniel. On Context in Autorization Policy. In SACMAT, Como, Italy, June 2003.
11. N. Nissanke and E. J. Khayat. Risk Based Security Analysis of Permissions in RBAC. In 2nd International Workshop on Security in Information Systems, Porto, Portugal, April 2004.
12. V L. Smith. Markets as Economizers of Information: Experimental Examination of the "Hayek Hypothesis". Economic Inquiry, 20(2):165-175, 1982.
13. D. Stork. Downgrading in a Secure Multilevel Computer System: The Formulary Concept. Technical Report MTR 2924, ESD-TR-75-62, The MITRE Corporation: Bedford, MA. HQ Electronic Systems Division, Hanscom AFB, MA, May 1975.