Multi-level authorisation model and framework for distributed semantic-aware environments

IET Information Security

Volumn 4, Issue 4, 2010, Pages 301-321

  Amini, M ^a   Jalili, R ^a  

^a SHARIF UNIVERSITY OF TECHNOLOGY   (Iran)

Author keywords

[No Author keywords available]

Indexed keywords

AWARE ENVIRONMENTS; COMPUTATIONAL ENVIRONMENTS; COOPERATIVE SECURITY MANAGEMENT; DISTRIBUTED SYSTEMS; DOMAIN ARCHITECTURES; MULTI-LEVEL; POLICY SPECIFICATION; SEMANTIC RELATIONSHIPS; SEMANTIC TECHNOLOGIES;

INTEROPERABILITY; NETWORK SECURITY;

SEMANTICS;

EID: 78650322645     PISSN: 17518709     EISSN: 17518717     Source Type: Journal    
DOI: 10.1049/iet-ifs.2009.0198     Document Type: Article

References (49)

1. ' Semantic wave-part 1 ', Technical Report, 2006, A Project10X Special Report, Wilshire Conferences, Inc.
2. 2 A normative logic for authorization in semantic-aware environments ', Under-review in Fundamenta Informaticae, 2010, available at http://ce.sharif.edu/~m-amini/publications/ submitted/basic-madl2.pdf
3. Weitzner, D.J., Hendler, J., Berners-Lee, T., and Connolly, D.: ' Creating a policy-aware web: discretionary, rule-based access for the World Wide Web ', Lena, F., Bhavani, T., Web and information security, (IOS Press, Hershey, PA, USA, 2004)
4. Wijesekera, D., and Jajodia, S.: ' A propositional policy algebra for access control ', ACM Trans. Inf. Syst. Secur., 2003, 6, (2), p. 286-325 10.1145/762476.762481 1094-9224
5. Kagal, L., Finin, T., and Joshi, A.: ' A policy-based approach to security for the semantic web ', Proc. Second Int. Semantic Web Conf. (ISWC03), Sanibel Island, Florida, USA, October, 2003
6. Uszok, A., Bradshaw, J.M., and Johnson, M.: et al. ' KAoS policy management for semantic web services ', IEEE Intell. Syst., 2004, 19, (4), p. 32-41 1541-1672
7. Uszok, A., Bradshaw, J.M., and Lott, J.: et al. ' New developments in ontology-based policy management: increasing the practicality and comprehensiveness of KAoS ', Proc. IEEE Workshop on Policies for Distributed Systems and Networks (Policy'08), Palisades, NY, USA, 2008, p. 145-152
8. Moses, T.: ' eXtensible access control markup language ', Version 2.0, OASIS Standard, February 2005
9. Qin, L., and Atluri, V.: ' Concept-level access control for the semantic web ', Proc. 2003 ACM Workshop on XML Security (XMLSEC'03), New York, NY, USA, 2003, p. 94-103
10. Javanmardi, S., Amini, M., Jalili, R., and GanjiSaffar, Y.: ' SBAC: a semantic based access control model ', Proc. 11th Nordic Workshop on Secure IT-systems (NordSec2006), Linkping, Sweden, 2006, p. 157-168
11. Kagal, L., Berners-Lee, T., Connolly, D., and Weitzner, D.: ' Using semantic web technologies for policy management on the web ', Proc. 21st National Conf. on Artificial Intelligence (AAAI06), Boston, MA, USA, 2006
12. Uszok, A., Bradshaw, J., and Hayes, P.: et al. ' DAML reality check: a case study of KAoS domain and policy services ', Proc. Int. Semantic Web Conf. (ISWC 03), Sanibel Island, Florida, 2003
13. 2: logical language family for policy specification and inference ', Technical, NSC-09-01, Sharif University of Technology, Sharif Network Security Center, Department of Computer Engineering, 2009, available at http://ce.sharif.edu/~m-amini/publications/reports/madl2family.pdf
14. Pearlman, L., Welch, V., Foster, I., Kesselman, C., and Tuecke, S.: ' A community authorization service for group collaboration ', Proc. Third IEEE Int. Workshop on Policies for Distributed Systems and Networks (Policy'02), Monterey, CA, USA, 2002, p. 50-59
15. Damiani, E., De Capitani di Vimercati, S., Fugazza, C., and Samarati, P.: ' Semantics-aware privacy and access control: motivation and preliminary results ', Proc. First Italian Semantic Web Workshop: Semantic Web Applications an Presepectives (SWAP04), Ancona, Italy, 2004
16. Priebe, T., Dobmeier, W., Schlager, C., and Kamprath, N.: ' Supporting attribute-based access control in authorization and authentication infrastructures with ontologies ', J. Softw., 2007, 2, (1), p. 27-38 1000-9825
17. Javanmardi, S., Amini, M., and Jalili, R.: ' An access control model for protecting semantic web resources ', Proc. Second Int. Semantic Web Policy Workshop (SWPW'06) 2006, Athens, GA, USA, 2006, p. 32-46
18. Yague, M.I., Mana, A., Lopez, J., and Troya, J.M.: ' Applying the semantic web layers to access control ', Proc. 14th Int. Workshop on Database and Expert Systems Applications (DEXA'03), Prague, Czech Republic, 2003, p. 622-626
19. Yague, M., del Mar Gallardo, M., and Mana, A.: ' Semantic access control model: a formal specification ', Proc. Tenth European Symp. on Research in Computer Security (ESORICS'05), (LNCS, 3679), Milan, Italy, 2005, p. 24-43
20. Naumenko, A.: ' Semantics-based access control in business networks ', 2007, PhD, University of Jyvasky
21. Kagal, L., Finin, T., and Joshi, A.: ' Trust-based security in pervasive computing environments ', IEEE Comput., 2001, 34, (12), p. 154-157
22. Joshi, J.B.D., Bhatti, R., Bertino, E., and Ghafoor, A.: ' Access-control language for multidomain environments ', IEEE Internet Comput., 2004, 8, (6), p. 40-50 10.1109/MIC.2004.53 1089-7801
23. Demchenko, Y., de Laat, C., Gommans, L., and van Buuren, R.: ' Domain based access control model for distributed collaborative applications ', Proc. Second IEEE Int. Conf. on e-Science and Grid Computing, Amsterdam, Netherlands, 2006
24. Tang, Z., Li, R., and Lu, Z.: ' A request-driven role mapping for secure interoperation in multi-domain environment ', Proc. IFIP Int. Conf. on Network and Parallel Computing Workshops (NPC 2007), Dalian, China, 2007, p. 83-90
25. Amini, M., and Jalili, R.: ' A calculus for composite authorities' policy derivation in shared domains of pervasive computing environments ', Proc. IEEE Int. Workshop on Internet and Distributed Computing Systems (IDCS'08), Bangladesh, 2008, p. 21-28
26. Bettini, C., Jajodia, S., Sean Wang, X., and Wijesekera, D.: ' Provisions and obligations in policy rule management ', J. Netw. Syst. Manag., 2003, 11, (3), p. 351-372 10.1023/A:1025711105609
27. Liu, Z., Ranganathan, A., and Riabov, A.: ' Specifying and enforcing high-level semantic obligation policies ', Proc. Eigth IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY'07), Bologna, Italy, 2007, p. 119-128
28. Agarwal, S., and Sprick, B.: ' Specification of access control and certification policies for semantic web services ', Proc. Sixth Int. Conf. on Electronic Commerce and Web Technologies (EC-Web 05), Copenhagen, 2005, p. 348-357, (LNCS, 3590)
29. Stermsek, G., Strembeck, M., and Neumann, G.: ' Using subject-and object-specific attributes for access control in web-based knowledge management systems ', Proc. Workshop on Secure Knowledge Management (SKM'04), Amherst, NY, USA, 2004
30. Masoumzadeh, A., Amini, M., and Jalili, R.: ' Context-aware provisional access control ', Proc. Second Int. Conf. on Information Systems Security (ICISS'06), Kolkata, India, 2006, p. 132-146, (LNCS, 4332)
31. Emami, S.S., Amini, M., and Zokaei, S.: ' A context-aware access control model for pervasive computing environments ', Proc. IEEE Int. Conf. on Intelligent Pervasive Computing (IPC 2007), Jeju Island, Korea, 2007, p. 51-56
32. Uszok, A., Bradshaw, J., and Jeffers, R.: et al. ' KAoS policy and domain services: toward a description-logic approach to policy representation, deconiction, and enforcement ', Proc. Fourth IEEE Int. Workshop on Policies for Distributed Systems and Networks (POLICY'03), Washington, DC, USA, 2003, p. 93
33. Lupu, E.C., and Sloman, M.: ' Conflicts in policy-based distributed systems management ', IEEE Trans. Softw. Eng., 1999, 25, (6), p. 852-869 0098-5589
34. ISO/IEC: 'Information technology-open systems interconnection-security frameworks for open systems: access control framework'. ISO/IEC 10181-3, November 1995
35. ISO/IEC:9594-8: 'ITU-T recommendation X.509: infomation technology-open systems interconnection-the directory: public-key and attribute certificate frameworks'. Technical Report, ITU-T, 2001
36. Denker, G., Nguyen, S., and Ton, A.: ' OWL-S semantics of security web services: a case study ', Proc. First European Semantic Web Symp., Heraklion, Greece, 2004, p. 240-253
37. Ehsan, M.A., Amini, M., and Jalili, R.: ' A semantic-based access control mechanism using semantic technologies ', Proc. Second Int. Conf. on Security of Information and Networks (SIN 2009), Gazimagusa, North Cyprus, 2009
38. Wu, Z., and Chen, H.: ' Semantic grid: model, methodology, and applications, ', Advanced topics in science and technology in China, (Springer-Verlag, 2008))
39. De Roure, D.: ' Future for European grids: GRIDs and service oriented knowledge utilities ', 2009, http://www.semanticgrid.org/documents/ngg3/ngg3. html
40. Corcho, O., Alper, P., Kotsiopoulos, I., Missier, P., Bechhofer, S., and Goble, C.: ' An overview of S-OGSA: a reference semantic grid architecture ', Web Semantics: Sci., Servi. Agents World Wide Web, 2006, 4, (2), p. 102-115
41. Murphy, M.J., Dick, M., and Fischer, T.: ' Towards the semantic grid: a state of the art survey of semantic web services and their applicability to collaborative design, engineering, and procurement ', J. Commun. IIMA, 2008, 8, (3), p. 11-24
42. Foster, I.T.: ' Globus toolkit Version 4: software for service-oriented systems ', Proc. IFIP Int. Conf. on Network and Parallel Computing, 2005, p. 2-13, (LNCS, 3779)
43. Zhang, X.M.: ' A semantic grid oriented to E-tourism ', Proc. First Int. Conf. on Cloud Computing, Beijing, China, 2009, p. 485-496, (LNCS, 5931)
44. Foster, I., Kesselman, C., and Tuecke, S.: ' The anatomy of the grid: enabling scalable virtual organizations ', Int. J. High Perform. Comput. Appl., 2001, 15, (3), p. 200-222 1078-3482
45. Li, J.: ' Semantics-based resource discovery in global-scale grids ', 2008, PhD, The University of British Columbia
46. Baader, F., Calvanese, D., McGuinness, D.L., Nardi, D., and Patel-Schneider, P.F.: ' The description logic handbook: theory, implementation, and applications ', (Cambridge University Press, New York, NY, USA, 2003)
47. Masoumzadeh, A., Amini, M., and Jalili, R.: ' Conflict detection and resolution in a context-aware authorization system ', Proc. Third IEEE Symp. on Security in Networks and Distributed Systems (SSNDS'07), Niagara Falls, Canada, 2007, p. 505-511
48. Johnson, R.: ' Parallel analytic tableaux systems ', 1996, PhD, Queen Mary and Westfield College, University of London
49. Liebig, T., and Müller, F.: ' Parallelizing tableaux-based description logic reasoning ', Proc. Int. Workshops on the Move to Meaningful Internet Systems (OTM'07), Vilamoura, Portugal, 2007, p. 1135-1144, (LNCS, 4806)