http://www.cnr.it/ontology/cnr/individuo/prodotto/ID204293

Risk-based Auto Delegation for Probabilistic Availability (Contributo in atti di convegno)

Type

Label

Risk-based Auto Delegation for Probabilistic Availability (Contributo in atti di convegno) (literal)

Anno

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#doi

Alternative label

Krautsevich L. [1], Martinelli F. [1], Morisset C. [1], Yautsiukhin A. [1] (2011)
Risk-based Auto Delegation for Probabilistic Availability
in 4th SETOP International Workshop pn Autonomous and Spontaneous Security, Leuven, Belgium, 15-16 Sept 2011
(literal)

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#autori

Krautsevich L. [1], Martinelli F. [1], Morisset C. [1], Yautsiukhin A. [1] (literal)

Pagina inizio

Pagina fine

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#altreInformazioni

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#affiliazioni

Titolo

Abstract

Dynamic and evolving systems might require flexible access control mechanisms, in order to make sure that the unavailability of some users does not prevent the system to be functional, in particular for emergency-prone environments, such as healthcare, natural disaster response teams, or military systems. The auto-delegation mechanism, which combines the strengths of delegation systems and \"break-the-glass\" policies, was recently introduced to handle such situations, by stating that the most qualified available user for a resource can access this resource. In this work we extend this mechanism by considering availability as a quantitative measure, such that each user is associated with a probability of availability. The decision to allow or deny an access is based on the utility of each outcome and on a risk strategy. We describe a generic framework allowing a system designer to define these different concepts. We also illustrate our framework with two specific use cases inspired from healthcare systems and resource management systems. (literal)

Editore