An overview of risk estimation techniques in risk-based access control for the internet of things

IoTBDS 2017 - Proceedings of the 2nd International Conference on Internet of Things, Big Data and Security

Volumn , Issue , 2017, Pages 254-260

  Atlam, Hany F ^a,b   Alenezi, Ahmed ^a   Walters, Robert J ^a   Wills, Gary B ^a  

^a UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

^b MENOUFIA UNIVERSITY   (Egypt)

Author keywords

Access control; Internet of things; Risk estimation; Risk based access control; Security risk

Indexed keywords

ACCESS CONTROL; BIG DATA; INTERNET OF THINGS; RISK ANALYSIS; RISK ASSESSMENT;

ACCESS CONTROL MODELS; CONTROL ENVIRONMENT; DYNAMIC ACCESS CONTROL; INTERNET OF THING (IOT); RISK ESTIMATION; RISK-BASED; SECURITY AND PRIVACY; SECURITY RISKS;

RISK PERCEPTION;

EID: 85024399591     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.5220/0006292602540260     Document Type: Conference Paper

References (30)

1. Abul-Haggag, O.Y. & Barakat, W., 2013. Application of Fuzzy Logic for Risk Assessment using Risk Matrix. International Journal of Emerging Technology and Advanced Engineering, 3(1), pp.49-54.
2. Adda, M. et al., 2015. Toward an Access Control Model for IOTCollab. The 6th International Conference on Ambient Systems, Networks and Technologies, 52(Ant), pp.428-435.
3. Chen, P. et al., 2007. Fuzzy Multi - Level Security : An Experiment on Quantified Risk -Adaptive Access Control. 2007 IEEE Symposiu m on Security and Privacy(SP'07), pp.222-227.
4. Diep, N.N. et al., 2007. Enforcing Access Control Using Risk Assessment. the Fourth European Conference on Universal Multiservice Networks, pp.419-424.
5. Fremantle, P. et al., 2014. Federated Identity and Access Management for the Internet of Things. 2014 International Workshop on Secure Internet of Things (SIoT), pp.10-17.
6. Goerdin, S.A. V, Smit, J.J. & Mehairjan, R.P.Y., 2015a. Monte Carlo simulation applied to support risk-based decision making in electricity distribution networks. 2015 IEEE Eindhoven PowerTech, PowerTech 2015.
7. Goerdin, S.A. V, Smit, J.J. & Mehairjan, R.P.Y., 2015b. Monte Carlo simulation applied to support risk-based decision making in electricity distribution networks. 2015 IEEE Eindhoven PowerTech.
8. Habib, K. & Leister, W., 2015. Context-Aware Authentication for the Internet of Things. The Eleventh International Conference on Autonomic and Autonomous Systems fined, pp.134-139.
9. Hamdi, M. & Abie, H., 2014. Game-based adaptive security in the Internet of Things for eHealth. 2014 IEEE International Conference on Communications, ICC 2014, pp.920-925.
10. Kahneman, D., Slovic, P. & Tversky, A., 1974. Judgment under uncertainty: Heuristics and biases. Science, 185(4157), pp.1124-1131.
11. Khambhammettu, H. et al., 2013. A framework for risk assessment in access control systems. Computers & Security, 39(Sec 2012), pp.86-103.
12. Kulk, G.P., Peters, R.J. & Verhoef, C., 2009. Quantifying IT estimation risks. Science of Computer Programming, 74(11-12), pp.900-933.
13. Langaliya, C. & Aluvalu, R., 2015. Enhancing Cloud Security through Access Control Models : A Survey. International Journal of Computer Applications, 112(7), pp.8-12.
14. Li, J., Bai, Y. & Zaman, N., 2013. A fuzzy modeling approach for risk-based access control in eHealth cloud. Proceedings - 12th IEEE International Conference on Trust, Security, and Privacy in Computing and Communications, TrustCom 2013, pp.17-23.
15. Liu, J., Xiao, Y. & Chen, C.L.P., 2012. Authentication and access control in the Internet of things. Proceedings - 32nd IEEE International Conference on Distributed Computing Systems Workshops, ICDCSW 2012, pp.588-592.
16. Ni, Q., Bertino, E. & Lobo, J., 2010. Risk-based access control systems built on fuzzy inferences. in Proceedings of the 5th ACM Symposium on Information, Computer, and Communications Security, ser. ASIACCS 10. New York, NY, USA: ACM, pp.250- 260.
17. Pluess, D., Groso, A. & Meyer, T., 2013. Expert Judfgement in Risk Analysis: A Strategy to Overcome Uncertainities. Chemical Engineering Transactions, 31, pp.307-312.
18. Pokorádi, L., 2002. Fuzzy logic-based risk assessment. Academic and Applied Research in Military Science, 1(1), pp.63-73.
19. Rajbhandari, L. & Snekkenes, E.A., 2011. Using game theory to analyze risk to privacy: An initial insight. Privacy and Identity Management for Life, Springer Berlin Heidelberg, pp.41-51.
20. Ricardo dos Santos, D., Westphall, C.M. & Westphall, C.B., 2013. Risk-based Dynamic Access Control for a Highly Scalable Cloud Federation. Proceedings of the Seventh International Conference on Emerging Security Information, Systems and Technologies (SECUREWARE 2013), pp.8-13.
21. Dos Santos, D.R., Westphall, C.M. & Westphall, C.B., 2014. A dynamic risk-based access control architecture for cloud computing. IEEE/IFIP NOMS 2014 - IEEE/IFIP Network Operations and Management Symposium: Management in a Software Defined World, pp.1-9.
22. Shaikh, R.A., Adi, K. & Logrippo, L., 2012. Dynamic riskbased decision methods for access control systems. Computers and Security, 31(4), pp.447-464.
23. Shanbhag, R. & Shankarmani, R., 2015. Architecture for Internet of Things to minimize human intervention. 2015 International Conference on Advances in Computing, Communications, and Informatics, ICACCI 2015, pp.2348-2353.
24. Shang, K. & Hossen, Z., 2013. Applying Fuzzy Logic to Risk Assessment and Decision-Making. Casualty Actuarial Society, Canadian Institute of Actuaries, Society of Actuaries, pp.1-59.
25. Stoneburner, G., Goguen, A. & Feringa, A., 2002. Risk Management Guide for Information Technology Systems. Nist Special Publication Sp, 30(30).
26. Stoneburner, G., Goguen, A. & Feringa, A., 2002. Risk Management Guide for Information Technology Systems. Nist Special Publication, 19, p.58.
27. Wang, S. et al., 2016. A Vertical Handoff Method via Self- Selection Decision Tree for Internet of Vehicles. IEEE Systems Journal, 10(3), pp.1183-1192.
28. Ye, N. et al., 2014. An efficient authentication and access control scheme for perception layer of internet of things. Applied Mathematics and Information Sciences, 8(4), pp.1617-1624.
29. Yin, J. et al., 2006. On estimating the security risks of composite software services. In First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006).
30. Zhi, L., Jing, W. & Xiao-su, C., 2009. Research on Policybased Access Control Model., (1), pp.164-167.