PEP-side caching: An insider threat port

Proceedings of the 2013 IEEE 14th International Conference on Information Reuse and Integration, IEEE IRI 2013

Volumn , Issue , 2013, Pages 137-144

  Yaseen, Qussai ^a   Althebyan, Qutaibah ^b   Jararweh, Yaser ^b  

^a YARMOUK UNIVERSITY   (Jordan)

^b JORDAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Jordan)

Author keywords

Access Control; Cloud Computing; Insider Threat; PEP Side caching; Relational Databases

Indexed keywords

CLOUD COMPUTING; INFORMATION USE;

ACCESS CONTROL MECHANISM; ACCESS CONTROL MODELS; CACHING MODELS; INSIDER THREAT; LIGHT MODELING; PEP-SIDE CACHING; PROCESSING OVERHEAD; RELATIONAL DATABASE;

ACCESS CONTROL;

EID: 84891106463     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IRI.2013.6642464     Document Type: Conference Paper

References (26)

1. Gordon, M. Loeb, W. Lucyshyn, R. Richardson,"Computer Crime and Security Survey," Internet:http://www.cpppe.umd.edu/Bookstore/Documents/ 2005CSISurvey.pdf, [Jan 25, 2012].
2. "The Value of Corporate Secrets", Internet:http://www.download. microsoft.com, [Jan 25, 2012].
3. "2007 E-Crime Watch Survey," Internet:http://www.cert.org/ archive/pdf/ecrimesummary07.pdf, [Jan 25, 2012].
4. Q. Yaseen, B. Panda, "Organizing Access Privileges:Maximizing the Availability and Mitigating the Threat ofInsiders Knowledgebase," Proc. NSS'2010, 2010, pp.312-317.
5. Q. Yaseen and B. Panda, "Predicting and PreventingInsider Threat in Relational Database Systems", Proc.WISTP, 2010, pp.368-383.
6. Q. Yaseen and B. Panda, "Malicious Modification Attacksby Insiders in Relational Databases: Prediction andPrevention", Proc. IEEE SocialCom/PASSAT, 2010,pp.849-856.
7. C. Farkas, T.S. Toland, and C.M. Eastman, "TheInference Problem and Updates in Relational Databases",Proc. DBSec, 2001, pp.181-194.
8. Q. Yaseen and B. Panda, "Tackling Insider Threat inRelational Database Systems", Proc. ACM/IEEEUCC2012, Chicago, IL, USA, 2012.
9. L. G. DeMichiel, L. U. Yalçinalp, and S. Krishnan.Enterprise JavaBeans Specification, Version 2.0. SunMicrosystems, 2001.
10. G. Karjoth. Access control with IBM Tivoli AccessManager. ACM Transactions on Information and systemsSecurity, 6(2):232-57, 2003.
11. OMG. CORBA services: Common object servicesspecification, security service specification v1.8, 2002.
12. Netegrity. Siteminder concepts guide. Technical report,Netegrity, 2000.
13. J. Crampton, W. Leung, and K. Beznosov. "Secondary andapproximate authorizations model and its application toBell-LaPadula Policies", Proc. The 11th ACM Symposiumon Access Control Models and Technologies, 2006.
14. Q. Wei, M. Ripeanu, K Beznosov," Cooperative SecondaryAuthorization Recycling", IEEE Transactions on Paralleland Distributed Systems, vol. 20(2), 2009, pp. 275-288.
15. L. Kaufman, "Data Security in the World of CloudComputing", IEEE Security &Privacy, vol.7(4), 2009.
16. A. Almutairi, M. Sarfraz, S. Basalamah, W. Aref, A.Ghafoor, "A Distributed Access Control Architecture forCloud Computing", IEEE Software, vol.29(2), pp.36,44,2012.
17. H. Takabi, "SecureCloud: Towards a comprehensivesecurity framework for cloud computing environment",Proc. IEEE COMPSACW10, 2010, pp. 393-398.
18. J. Arshad, P. Townend and J. Xu, "An automatic intrusiondiagnosis approach for clouds", J. Automation andComputing, 2011.
19. C. Wang, Q. Wang, K. Ren, and W. Lou, "Ensuring DataStorage Security in Cloud Computing", IACR CryptologyePrint Archive, 2009, pp.81-81.
20. K. Hwang, S. Kulkarni, and Y. Hu, "Cloud Security withVirtualized Defense and Reputation-Based TrustManagement", Proc. IEEE DASC09, IEEE CS Press, 2009,pp. 717-722.
21. R. Chow, P. Golle, M. Jakobsson, E. Shi, J. Staddon,R.Masuoka, J. Molina,"Controlling data in the cloud:outsourcing computation without outsourcing control",Proc. ACM CCSW '09, 2009.
22. H. Hac?gudie;mudie;?, J. Tatemura, Y. Chi, W. Hsiung, H.Jafarpour, H. Moon and O. Po, "CloudDB: A Data Storefor All Sizes in the Cloud", Internet: http://www.neclabs.com/dm /CloudDBweb.Pdf, [January 25, 2012].
23. C. Curino, E.P.C. Jones, R.A. Popa, N. Malviya, E. Wu, S.Madden, H. Balakrishnan, and N. Zeldovich, "RelationalCloud: a Database Service for the cloud", Proc. CIDR,2011, pp.235-240.
24. Amazon Relational Database. Internet: http://aws.amazon.com/rds/, [Jan 25, 2012].
25. SQL Azure. Internet: http://www.microsoft.com/applicationplatform/en/us/ Key-Technologies/SQLAzure.aspx, [January 25, 2012].
26. L. Spitzner, "Honeypots: Catching the Insider Threat",Proc. ACSAC, 2003, pp.170-181.