http://www.cnr.it/ontology/cnr/individuo/prodotto/ID278658

Cost-Effective Enforcement of Access and Usage Control Policies under Uncertainties (Articolo in rivista)

Type

Label

Cost-Effective Enforcement of Access and Usage Control Policies under Uncertainties (Articolo in rivista) (literal)

Anno

Alternative label

Leanid Krautsevich, Aliaksandr Lazouski, Fabio Martinelli, Artsiom Yautsiukhin (2013)
Cost-Effective Enforcement of Access and Usage Control Policies under Uncertainties
in IEEE systems journal (Online); IEEE, New York (Stati Uniti d'America)
(literal)

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#autori

Leanid Krautsevich, Aliaksandr Lazouski, Fabio Martinelli, Artsiom Yautsiukhin (literal)

Pagina inizio

Pagina fine

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#numeroVolume

Rivista

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#numeroFascicolo

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#affiliazioni

Titolo

Cost-Effective Enforcement of Access and Usage Control Policies under Uncertainties (literal)

Abstract

In Usage CONtrol (UCON) access decisions rely on mutable attributes. A reference monitor should re-evaluate security policies each time attributes change their values. Identifying all attribute changes in a timely manner is a challenging issue, especially if the attribute provider and the reference monitor reside in different security domains. Some attribute changes might be missed, corrupted, and delayed. As a result, the reference monitor may erroneously grant access to malicious users and forbid it for eligible ones. This paper proposes a set of policy enforcement models which help to mitigate the uncertainties associated with mutable attributes. In our model the reference monitor, as usual, evaluates logical predicates over attributes and, additionally, makes some estimates on how much observed attribute values differ from the real state of the world. The final access decision takes into account both factors. We assign costs for granting and revoking access to legitimate and malicious users and compare the proposed policy enforcement models in terms of cost-efficiency. (literal)

Editore