|
|
|
题名
|
作者
|
年代
|
出处
|
被引量
|
| 1 | A framework for the extended evaluation of ABAC policies显示文摘A main challenge of attribute-based access control(ABAC)is the handling of missing information.Several studies have shown that the way standard ABAC mechanisms,e.g.based on XACML,handle missing information is flawed,making ABAC policies vulnerable to attribute-hiding attacks.Recent work has addressed the problem of missing information in ABAC by introducing the notion of extended evaluation,where the evaluation of a query considers all queries that can be obtained by extending the initial query.This method counters attribute-hiding attacks,but a na飗e implementation is intractable,as it requires an evaluation of the whole query space.In this paper,we present a framework for the extended evaluation of ABAC policies.The framework relies on Binary Decision Diagram(BDDs)data structures for the efficient computation of the extended evaluation of ABAC policies.We also introduce the notion of query constraints and attribute value power to avoid evaluating queries that do not represent a valid state of the system and to identify which attribute values should be considered in the computation of the extended evaluation,respectively.We illustrate our framework using three real-world policies,which would be intractable with the original method but which are analyzed in seconds using our framework. | Charles Morisset Tim A.C.Willemse Nicola Zannone | 2019 | Cybersecurity2019，2，1： | 1 |
| 2 | Towards the development of privacy-aware systems 显示文摘 | GUARDA P ZANNONE N | 2009 | Information and Software Technology2009，51，2： | 1 |
| 3 | Engineering and verifying agent-oriented re- quirements augmented by business constraints with B-Tropos 显示文摘 | MONTALI M TORRONI P ZANNONE N | 2011 | Autonomous Agents and Multi- Agent Systems2011，23，2： | 1 |
| 4 | Non-alcoholic fatty liver and insulin resistance: acau se-effeet relationship 显示文摘 | BugianesiE ZannoniC VanniE | 2004 | Dig LiverDis2004，36，3： | 1 |
| 5 | A reference model for reputation systems显示文摘 | Vavilis S Petkovic M Zannone N | 2014 | Decision Support Systems2014，61，： | 1 |
| 6 | Hierarchical hippocratic databases with minimal disclosure for virtual organizations显示文摘 | Fabio Massacci John Mylopoulos Nicola Zannone | 2006 | The VLDB Journal2006，，4： | 1 |
| 7 | A framework for the extended evaluation of ABAC policies显示文摘A main challenge of attribute-based access control(ABAC)is the handling of missing information.Several studies have shown that the way standard ABAC mechanisms,e.g.based on XACML,handle missing information is flawed,making ABAC policies vulnerable to attribute-hiding attacks.Recent work has addressed the problem of missing information in ABAC by introducing the notion of extended evaluation,where the evaluation of a query considers all queries that can be obtained by extending the initial query.This method counters attribute-hiding attacks,but a naïve implementation is intractable,as it requires an evaluation of the whole query space.In this paper,we present a framework for the extended evaluation of ABAC policies.The framework relies on Binary Decision Diagram(BDDs)data structures for the efficient computation of the extended evaluation of ABAC policies.We also introduce the notion of query constraints and attribute value power to avoid evaluating queries that do not represent a valid state of the system and to identify which attribute values should be considered in the computation of the extended evaluation,respectively.We illustrate our framework using three real-world policies,which would be intractable with the original method but which are analyzed in seconds using our framework. | Charles Morisset Tim A.C.Willemse Nicola Zannone | 2018 | Cybersecurity2018，1，1： | 0 |
您所在的机构暂未开通此部分的功能，请联系管理员