语义上正确的政策挖掘和执行基于属性的访问控制
Gunjan Batra1, Samir Talegaon2, Vijayalakshmi Atluri3
1Kennesaw State University, USA.
概括
基于属性的访问控制 (ABAC) 策略可能会由于对象属性语义产生意想不到的后果. 这项研究区分了两个ABAC语义,突出了风险,并提出了安全访问控制的解决方案.
科学领域:
- 计算机科学 计算机科学
- 信息安全 信息安全
- 访问控制系统 访问控制系统
背景情况:
- 基于属性的访问控制 (ABAC) 提供了动态,灵活,便携和可扩展的安全性.
- 当前的ABAC模型假设等级继承,即访问一般对象意味着访问其子类型.
- 当特定数据比一般数据更敏感时,这种假设可能会导致安全漏洞.
研究的目的:
- 挑战对ABAC语义的传统理解.
- 根据对象属性解释,区分两个不同的ABAC语义.
- 识别和解决由这些语义产生的潜在安全错误配置.
主要方法:
- 对ABAC语义的概念分析.
- 开发具体的例子来说明两个已识别的语义.
- 与当前的ABAC实施相关的安全风险的经验和事证据.
- 建议对现有的ABAC算法进行修改,以提高安全性.
主要成果:
- 根据对象属性解释,确定了两个不同的ABAC语义.
- 证明了对等级继承的传统理解可能是不适当的,并导致安全漏洞.
- 在经验和事上证实了误解ABAC语义的风险.
- 建议对现有算法进行修改,以防止错误配置并确保安全.
结论:
- 对ABAC语义的标准解释并不普遍适用.
- 忽视对象属性语义的细微差别可能会导致严重的安全漏洞.
- 修改后的ABAC算法是必要的,以确保强大的安全性,并防止错误配置在不同的场景.
更多相关视频
08:17A Semantic Priming Event-related Potential ERP Task to Study Lexico-semantic and Visuo-semantic Processing in Autism Spectrum Disorder
Published on: April 12, 2018
11.1K
07:41Performing Data Mining And Integrative Analysis Of Biomarker in Breast Cancer Using Multiple Publicly Accessible Databases
Published on: May 17, 2019
9.6K
相关概念视频
Attribution Theory
13.8K
Behavior is a product of both the situation (e.g., cultural influences, social roles, and the presence of bystanders) and of the person (e.g., personality characteristics). Subfields of psychology tend to focus on one influence or behavior over others. Situationism is the view that our behavior and actions are determined by our immediate environment and surroundings. In contrast, dispositionism holds that our behavior is determined by internal factors (Heider, 1958).
13.8K
Fundamental Attribution Error
13.8K
According to some social psychologists, people tend to overemphasize internal factors as explanations—or attributions—for the behavior of other people. They tend to assume that the behavior of another person is a trait of that person, and to underestimate the power of the situation on the behavior of others. They tend to fail to recognize when the behavior of another is due to situational variables, and thus to the person’s state. This erroneous assumption is...
13.8K
Attribution
287
In social interactions, individuals frequently seek to understand the motivations and causes behind others' behaviors. This fundamental aspect of social perception, known as attribution, plays a crucial role in shaping interpersonal relationships and guiding future actions. Attribution refers to the cognitive process through which people infer the reasons behind others' behaviors, allowing them to assess character traits, intentions, and situational influences.Attribution Theory and Its...
287
Distance Corrections
290
To achieve precise distance measurements, especially in surveying and construction, certain corrections must be applied to account for potential sources of error like the standardization errors, temperature variations, and slope adjustments.Standardization error emerges when measurement equipment undergoes changes, such as wear, repairs, or weather impacts. To address this, surveyors compare the equipment’s readings to a standard. This process identifies any deviation that might lead to...
290
Power Factor Correction
539
The power transmission to a factory involves the transfer of apparent power, a combination of active and reactive power. The power factor measures how effectively electrical power is converted into useful work output. The ratio of the real power (KW) that does the work to the apparent power (KVA) supplied to the circuit.
539
Personal Choice and Fate Attributions
176
Some individuals interpret life events as a consequence of their personal choices and actions, while others believe that outcomes are dictated by fate or destiny. This divergence in perspective has been examined in psychological and cross-cultural studies, particularly in relation to religious faith and cultural beliefs about causality.Fate and Personal ResponsibilityPeople who emphasize personal responsibility view events as direct consequences of their decisions. For instance, breaking a leg...
176
