A Context-Risk-Aware Access Control model for Ubiquitous envi-ronments

Proceedings of the International Multiconference on Computer Science and Information Technology, IMCSIT 2008

Volumn 3, Issue , 2008, Pages 775-782

  Ahmed, Ali ^a   Zhang, Ning ^a  

^a UNIVERSITY OF MANCHESTER   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MODELS; CONTEXTUAL INFORMATION; POTENTIAL IMPACTS; RUNTIMES; UBICOMP;

ACCESS CONTROL; INFORMATION TECHNOLOGY; RISK MANAGEMENT; SECURITY SYSTEMS; UBIQUITOUS COMPUTING;

RISK ASSESSMENT;

EID: 70349331706     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IMCSIT.2008.4747331     Document Type: Conference Paper

References (27)

1. R. J. Hulsebosch, A. H. Salden, M. S. Bargh, P. W. G. Ebben, J. Re-itsma. "Context sensitive access control", in Proc. 1 Oth ACM Sympo-sium on Access Control Models and Technologies (SACMAT '05), New York, 2005, pp. 111-119.
2. A. Dey, "Understanding and Using Context", Personal Ubiquitous Computing, vol.5(1), Springer-Verlag, 2001, pp. 4-7,London.
3. US Office of Management & Budge, "Memorandum M-04-04: E-Au-thentication Guidance for Federal Agencies" , December, 2003
4. W. E. Burr, D. F. Dodson, W. T. Polk, "Electronic authentication guideline", NIST special publication 800-63 version 1.0.2, April 2006.
5. R. Sandhu, P. Samarati, "Access control: Principles and practice", IEEE Communications Magazine, vol.32(9), 1994, pp. 40-48.
6. R. Sandhu, E. Coyne, H. Feinstein, C. Youman, "Role-based access control models", IEEE Computer, vol.29(2), February 1996, pp. 38-47.
7. S-. Chou, "An RBAC-based access control model for object-oriented systems offering dynamic aspect features", IEICE-Trans. Inf. Syst, vol.88(9), Oxford University Press, 2005, pp. 2143-2147.
8. S-. Park, Y-. Han, T-. Chung, "Context-role based access control for context-aware application". High Performance Computing and Com-munications, vol.4208, September 2006, Springer Berlin/Heidelberg, pp. 572-580.
9. M. J. Moyer, M. Ahamad, "Generalized role-based access control",in Proc. 21st International Conference on Distributed Computing Sys-tems (ICDCS '01), Washington DC, April 2001, IEEE Computer So-ciety, pp. 391-398.
10. M. J. Covington, P. Fogla, Z. Zhan, M. Ahamad, "A context-aware se-curity architecture for emerging applications", in Proc. 18th Annual Computer Security Applications Conference (ACSAC '02), Washing-ton DC, 2002, pp. 249, IEEE Computer Society.
11. E. Bertino, P. A. Bonatti, E. Ferrari, "TRBAC: A temporal role-based access control model", ACM Trans. Inf. Syst. Secur., vol.4(3), New York, ACM Press, 2001, pp. 191-233.
12. S-. Chae, W. Kim, D-. Kim, "Role-based access control model for ubiquitous computing environment", Information Security Applica-tions, vol.3786, February 2006, Springer Berlin/Heidelberg, pp. 354-363.
13. J. Joshi, E. Bertino, A. Ghafoor, "Hybrid role hierarchy for general-ized temporal role based access control model", in Proc. 26th Interna-tional Computer Software and Applications Conference on Prolonging Software Life: Development and Redevelopment (COMPSAC '02), Washington DC, IEEE Computer Society 2002, pp. 951-956.
14. F. Hansen, V. Oleshchu, "SRBAC: A spatial role-based access-control model for mobile systems", in Proc. 7th Nordic Workshop on Secure IT Systems (NORDSEC03). Gj'vik, Norway 2003, pp. 129-141.
15. H. Zhang, Y. He, Z. Shi, "Spatial context in role-based access control", Information Security and Cryptology-ICISC 2006, vol.4296, November 2006, Springer Berlin/Heidelberg Lecture Notes in Computer Science 2006, pp. 166-178. (Pubitemid 47163818)
16. Z. Guangsen, P. Manish, "Context-aware dynamic access control for pervasive applications", in Proc. Communication Netorks and Dis-tributed Systems Modeling and Simulation Conference, San Diego, California, January 2004, pp. 219-225.
17. Y-. Kim, C-. Mon, D. Jeong, J-. Lee, C-. Song, D-. Baik, "Context-aware access control mechanism for ubiquitous applications", Ad-vances in Web Intelligence, Springer Berlin/Heidelberg, May 2005, vol.3528, pp. 236-242.
18. G. H. M. B. Motta, S. S. Furuie, "A contextual role-based access con-trol authorization model for electronic patient record", IEEE Transac-tions on Information Technology in Biomedicine, vol.7(3), pp. 202-207, 2003.
19. N. N. Diep, L. X. Hung, Y. Zhung, S. Lee, Y-. Lee, H. Lee, "Enforc-ing access control using risk assessment", in Proc. 4th European Conference on Universal Multiservice Networks ( ECUMN '07), Washington DC, IEEE Computer Society, 2007, pp. 419-424.
20. K. K. Konrad, T. Konrad, D. David, S. Howard, D. Trevor, "Activity zones for context-aware computing", UbiComp 2003: Ubiquitous Computing, Springer Berlin/Heidelberg Lecture Notes in Computer Science, vol.2864, October 2006, 2003, pp. 90-106.
21. F. Meneses, A. Moreira, "A flexible location-context representation", in Proc. 15th IEEE International Symposium on Personal, Indoor and Mobile Radio Communications, (PIMRC 2004), vol.2, Septem-ber 2004, pp. 1065-1069
22. A. Sundaram, "An introduction to intrusion detection", ACM Cross-roads, vol.2(4), New York 1996, pp. 3-7.
23. S. Giles, D. Bersinic, MCSA Windows server 2003 all-in-one exam guide (exams 70-270,70-290,70-291), McGraw-Hill Osborne Media, 2003, pp. 614.
24. H. Barron, B. Barrett, "Decision quality using ranked attribute weights", Management Science, vol.42(11), November 1996, pp. 1515-1523.
25. H. Barron, "Selecting a best multiattribute alternative with partial in-formation about attribute weights", Acta Psychologies vol. 80, 1992, pp. 91-103
26. B. S .Aim, K. S. Park, "Comparing methods for multiattribute deci-sion making with ordinal weights", Computers & Operations Re-search, Part Special Issue: Algorithms and Computational Methods in Feasibility and Infeasibility, vol.35(5), May 2008, pp. 1660-1670.
27. A. Ranganathan, J. Al-Muhtadi, R. H. Campbell, "Reasoning about uncertain contexts in pervasive computing environments", IEEE Per-vasive Computing, vol.3(2), Los Alamitos, IEEE Computer Society 2004 , pp. 62-70.