Risk-based decision method for access control systems

2011 9th Annual International Conference on Privacy, Security and Trust, PST 2011

Volumn , Issue , 2011, Pages 189-192

  Shaikh, Riaz Ahmed ^a   Adi, Kamel ^a   Logrippo, Luigi ^a   Mankovski, Serge ^b  

^a UNIVERSITÉ DU QUÉBEC EN OUTAOUAIS   (Canada)

^b Sterling Software   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS DECISION; AUTOMATIC MECHANISMS; CLASSIFIED INFORMATION; REWARD AND PENALTY; RISK VALUE; RISK-BASED DECISIONS;

CONTROL THEORY; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 80052086152     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PST.2011.5971982     Document Type: Conference Paper

References (12)

1. D. E. Bell and L. J. LaPadula, "Secure computer system: Unified exposition and multics interpretation," The Mitre Corporation, Tech. Rep. ESD-TR-75-306, Mar 1976.
2. D. Ferraiolo, D. R. Kuhn, and R. Chandramouli, Role-Based Access Control. Artech House Publishers, 2003.
3. L. Dickens, A. Russo, P.-C. Cheng, and J. Lob, "Towards learning risk estimation functions for access control," in In Snowbird Learning Workshop, 2010.
4. L. Zhang, A. Brodsky, and S. Jajodia, "Toward information sharing: Benefit and risk access control (barac)," in Proceedings of the Seventh IEEE International Workshop on Policies for Distributed Systems and Networks. Washington, DC, USA: IEEE Computer Society, 2006, pp. 45-53. (Pubitemid 44888885)
5. Q. Ni, E. Bertino, and J. Lobo, "Risk-based access control systems built on fuzzy inferences," in Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, ser. ASIACCS '10. New York, NY, USA: ACM, 2010, pp. 250-260.
6. R. McGraw, "Risk-adaptable access control (RADAC)," in Privilege (Access) Management Workshop. NIST-National Institute of Standards and Technology-Information Technology Laboratory, 2009.
7. F. Salim, J. Reid, and E. Dawson, "Authorization models for secure information sharing: A survey and research agenda," The ISC International Journal of Information Security, vol. 2, no. 2, pp. 69-87, 2010.
8. J. P. Office, "Horizontal integration: Broader access models for realizing information dominance," The Mitre Corporation, Tech. Rep. JSR-04- 132, Dec 2004.
9. P.-C. Cheng, P. Rohatgi, C. Keser, P. A. Karger, G. M. Wagner, and A. S. Reninger, "Fuzzy multi-level security: An experiment on quantified riskadaptive access control," in IEEE Symposium on Security and Privacy. Los Alamitos, CA, USA: IEEE Computer Society, 2007, pp. 222-230.
10. I. Molloy, P.-C. Cheng, and P. Rohatgi, "Trading in risk: using markets to improve access control," in Proceedings of the 2008 workshop on New security paradigms, ser. NSPW '08. New York, NY, USA: ACM, 2008, pp. 107-125.
11. [Online] . Available: http://doi. acm.org/10. 1145/1595676. 1595694
12. C. L. Clark, "Shopping without cash: The emergence of the e-purse," Economic Perspectives, vol. 29, no. 4, pp. 34-51, 2005.