A risk calculus extension to the XACML language

SBSI 2016 - 12th Brazilian Symposium on Information Systems: Information Systems in the Cloud Computing Era, Proceedings

Volumn , Issue , 2016, Pages 321-328

  Alves, Jhonatan ^a   Westphall, Carla Merkle ^a   Schmitt, Gustavo Roecker ^a  

^a FEDERAL UNIVERSITY OF SANTA CATARINA   (Brazil)

Author keywords

Cloud computing; RadAC; Risk calculus; XACML

Indexed keywords

ADAPTIVE CONTROL SYSTEMS; CALCULATIONS; CLOUD COMPUTING; INFORMATION SYSTEMS; INFORMATION USE; MARKUP LANGUAGES; MEMORY ARCHITECTURE;

ACCESS CONTROL ARCHITECTURE; ACCESS CONTROL MODELS; CLOUD COMPUTING ENVIRONMENTS; DYNAMIC ACCESS CONTROL; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; RADAC; TECHNOLOGICAL SUPPORTS; XACML;

ACCESS CONTROL;

EID: 85040346506     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.5753/sbsi.2016.5978     Document Type: Conference Paper

References (14)

1. Security for cloud computing: 10 steps to ensure success. Technical report, 2012.
2. Chen Chen, Weili Han, and Jianming Yong. Specify and enforce the policies of quantified risk adaptive access control. In Weiming Shen, Ning Gu, Tun Lu, Jean-Paul A. Barthès, and Junzhou Luo, editors, CSCWD, pages 110-115. IEEE, 2010.
3. Liang Chen, Luca Gasparini, and Timothy J Norman. Xacml and risk-Aware access control. 2013.
4. Nguyen Ngoc Diep, Sungyoung Lee, Young-Koo Lee, and Heejo Lee. Contextual risk-based access control. In Selim Aissi and Hamid R. Arabnia, editors, Proceedings of the 2007 International Conference on Security & Management, SAM 2007, Las Vegas, Nevada, USA, June 25-28, 2007, pages 406- 412. CSREA Press, 2007.
5. Daniel Ricardo dos Santos, Carla MerkleWestphall, and Carlos Becker Westphall. A dynamic risk-based access control architecture for cloud computing. In Proceedings of the 14th IEEE/IFIP Network Operations and Management Symposium NOMS 2014. IEEE/IFIP, IEEE Press, May 2014.
6. Thomas Erl and Zaigham Mahmood Ricardo Puttini. Cloud Computing: Concepts, Technology and Architecture. The Prentice Hall Service Technology Series from Thomas Erl. Pearson Education, 2013.
7. Doudou Fall, Gregory Blanc, Takeshi Okuda, Youki Kadobayashi, and Suguru Yamaguch. Toward quantified riskadaptive access control for multi-Tenant cloud computing. In Proceedings of the 6th Joint Workshop on Information Security (JWIS 2011), Kaohsiung, Taiwan, August 2011, 2011.
8. Bassam Farroha and Deborah Farroha. Challenges of operationalizing dynamic system access control: Transitioning from abac to radac. In IEEE International Systems Conference, pages 1-7, march 2012.
9. Giorgos Giannopoulos, Ulf Brefeld, Theodore Dalamagas, and Timos Sellis. Learning to rank user intent. In Proceedings of the 20th ACM International Conference on Information and Knowledge Management, CIKM '11, pages 195- 200, New York, NY, USA, 2011. ACM.
10. Heras. http//www.herasaf.org/heras-Af-xacml.html 2012.[Accessed in 12/04/2015].
11. Peter Mell and Timothy Grance. The nist definition of cloud computing. Technical report, Gaithersburg, MD, United States, 2011.
12. OASIS. extensible access control markup language version 3.0 oasis standard, 2013.
13. JASON Program. Horizontal integration: Broader access models for realizing information dominance. Technical report, MITRE Corporation, 12, 2004.
14. Meeta Sharma, Yan Bai, Sam Chung, and Lirong Dai. Using risk in access control for cloud-Assisted ehealth. In High Performance Computing and Communication 2012 IEEE 9th International Conference on Embedded Software and Systems (HPCC-ICESS), 2012 IEEE 14th International Conference on, pages 1047-1052, 2012.