Dynamic Access Control Mechanism Research Articles

Software-defined network-based dynamic access control mechanism for internet of vehicles using Adaboost

Software-defined network-based dynamic access control mechanism for internet of vehicles using Adaboost

A Security Management and Control Solution of Smart Park Based on Sensor Networks

As a typical application of sensor networks, there exist many information security problems in smart parks, such as confusion of personnel access, lack of security management, disorderly data flow, insufficient collection of audit evidence, and so on. Aiming at the scenario of personnel and equipment moving in different areas of smart parks, the paper proposes a joint authorization and dynamic access control mechanism, which can provide unified identity management services, access control services, and policy management services, and effectively solve the problem of multi-authorization in user identity and authority management. The license negotiation interaction protocol is designed to prevent common network attack threats in the process of identity authentication and authority management. In order to realize the tamper-proof storage of personnel and equipment movement trajectory, the paper also designs a movement trajectory traceability protocol based on a Merkle tree, which solves the problems of internal personnel malicious attack, trusted third-party dependency bottleneck, high overheads of tracking algorithms, and so on. The experimental results show that compared with the current security control mechanisms for sensor networks, the joint authorization, and dynamic access control mechanism can support multi-party authorization and traceability, while the overhead it generates in initialization, encryption, decryption, and key generation steps are basically the same as other mechanisms do.

Efficient and Dynamic Access Control Mechanism for Secure Data Acquisition in IoT Environment

Efficient and Dynamic Access Control Mechanism for Secure Data Acquisition in IoT Environment

A machine learning application for reducing the security risks in hybrid cloud networks

Cloud computing facilitates the enormous support of the public, business and emerging applications such as healthcare and nature disasters. Based on their services and characteristics, it can be classified as private cloud and public cloud. In this scenario, we need these two kinds of cloud services for an organization to provide the better service to the society. For that purpose, introduced a new cloud service called hybrid cloud service which is the combination of both private and public cloud. Security to the cloud environment is a challenging issue today especially for the hybrid cloud due to the combination of both. Many security mechanisms available in the literature but these are not achieved the sufficient level of security. For this purpose, we propose a new machine learning application for providing security to the hybrid cloud networks while storing the data and retrieving or accessing the data from the cloud. This proposed algorithm combines an existing Enhanced C4.5, newly proposed deduplication processing algorithm and the newly proposed dynamic access control mechanism. Moreover, we introduce a new deduplication processing algorithm for secure storage and retrieval without duplication or redundancy. In addition, a newly proposed dynamic access control mechanism called Dynamic Spatial Role Based Access Control Algorithm is also used in the proposed security framework. The proposed security framework has been implemented and also evaluated that the security level of the hybrid cloud while storing, retrieving and accessing the data from the cloud database.

Dynamic Access Control Mechanism Based on Credibility

In this paper, combining the existing dynamic access control model based on trust with the dynamic measurement technique, we propose a dynamic access control scheme based on credibility. By the simulation test, the mechanism can prevent the malicious behavior of malicious nodes.

Trust-based Access Control Model in Multi-domain Environment

Access control is a process which control users to execute some operations of access some network resource according to the users identify of attribution. This paper analyzes current access control model, and extends the RBAC (role based access control) model, and based on which we propose a trust based access control model in Multi-domain environment (MDTRBAC). Design a heap-based trust management mechanism for MD-TRBAC Model, which is used to control the cross-domain access resource among different domains. The MDTRBAC model can provide more security, flexible and dynamic access control mechanism, and therefore improve both the security and the reliable of authorization mechanism.

Formal Model based Specification of Authorization Framework for Ubiquitous Enterprise Computing Environment

With the emergence of new dynamic computing environments, the traditional identity based authorization models are unable to meet multiple attribute based policy requirements through single function based access control model. There is need for a flexible and scalable authorization model that can meet the different protection requirement of the computing system and adapt to the demand of real world security requirements. In this paper a formal authorization model for ubiquitous computing environment is proposed. Ubiquitous computing environment demands a dynamic access control mechanism that can adapt to the changing security requirement of the computing environment. The proposed security model has taken these factors into consideration and adopted a formal approach to design a flexible and scalable model to support intelligent authorization process in ubiquitous computing environment.

Formal Policy based Authorization Model for Ubiquitous Enterprise Computing Environment

Ubiquitous computing environment demands a dynamic access control mechanism that can adapt to the changing security requirement of the computing environment. In this paper an authorization model for ubiquitous computing environment is proposed and a formal approach is adopted to design a flexible and scalable model to support intelligent authorization process in ubiquitous computing environment. Keywords Access Control, Authorization, Formal Methods, Security Model, Ubiquitous Computing.

Privacy Issues in Online Social Networks

The popularity of online Social Networks (OSN) is increasing tremendously. OSN enable people to connect with their friends as well as share information about their personal life. While most of the leading social platforms have primitives for providing privacy in the platform and the applications they are insufficient. There are some serious privacy problems that need to be resolved in existing OSN. There has to be a method to protect user-provided data in the profile as well as usergenerated data by the OSN providers. Similarly a fully flexible and dynamic access control mechanism should exist to protect private data against attackers and unauthorized users .The access control system should be efficient in managing the privacy policies of OSN users.

Stack-based access control and secure information flow

Access control mechanisms are often used with the intent of enforcing confidentiality and integrity policies, but few rigorous connections have been made between information flow and runtime access control. The Java virtual machine and the .NET runtime system provide a dynamic access control mechanism in which permissions are granted to program units and a runtime mechanism checks permissions of code in the calling chain. We investigate a design pattern by which this mechanism can be used to achieve confidentiality and integrity goals: a single interface serves callers of more than one security level and dynamic access control prevents release of high information to low callers. Programs fitting this pattern would be rejected by previous flow analyses. We give a static analysis that admits them, using permission-dependent security types. The analysis is given for a class-based object-oriented language with features including inheritance, dynamic binding, dynamically allocated mutable objects, type casts and recursive types. The analysis is shown to ensure a noninterference property formalizing confidentiality and integrity.

An efficient access control scheme for files protection

Abstract A dynamic access control mechanism suitable for hardware implementation is proposed. Each file is safeguarded by q lock values, where q is number of the possible access classes. The access right of a user to some file can be revealed very efficiently. In addition, dynamic operations such as changing a privilege value, insertion or deletion of a user, and insertion or deletion of a file can be done easily. Compared to Wu and Hwangs’ and Chang's methods, the computation of lock values is simple and the verification of an access request is quite efficient. The storage required is proportional to m•n which is less than that of the above‐mentioned methods, where m is the number of users and n is the number of files.