Privilege Management Research Articles

Object Capability Model for Tee: A Cheri Based Compartmentalization Approach

In this paper, we introduce a capability-driven approach to bolster security and granularity within Trusted Execution Environments (TEEs) [1]. By delivering precise privilege control and fine-grained compartmentalization, we aim to improve TEE security standards. To address vulnerabilities within Trusted Execution Environments (TEEs) and enable selective privilege management and secure object sharing between secure and normal worlds, we introduce a TEE compartmentalization framework based on the CHERI object-capability model. Leveraging DSbD technologies, our framework provides an efficient prototyping environment for developing trusted applications while safeguarding against existing threats. At Verifoxx Ltd, our architecture relies on TEEs to handle sensitive data, encompassing tasks such as extracting client secrets, managing commitments, sharding and executing cryptographic operations for zero-knowledge responses. The proposed approach holds promise where TEEs can enhance transaction security and enterprises seeking data protection. Our approach introduces in-enclave compartments with controlled communication, facilitating domain transitions through sealed data capability delegations and hardware-assisted call/return mechanisms. This enables application layer compartmentalization by modularly separating concerns within the secure world, emphasising single responsibility, least privileges, and information hiding from unprivileged compartments. Furthermore, we ensure the integrity of lower-layer hardware and OS properties, effectively thwarting compromise attempts.

Behind the last line of defense: Surviving SoC faults and intrusions

Today, leveraging the enormous modular power, diversity and flexibility of manycore systems-on-a-chip (SoCs) requires careful orchestration of complex and heterogeneous resources, a task left to low-level software, e.g., hypervisors. In current architectures, this software forms a single point of failure and worthwhile target for attacks: once compromised, adversaries can gain access to all information and full control over the platform and the environment it controls. This article proposes Midir, an enhanced manycore architecture, effecting a paradigm shift from SoCs to distributed SoCs. Midir changes the way platform resources are controlled, by retrofitting tile-based fault containment through well known mechanisms, while securing low-overhead quorum-based consensus on all critical operations, in particular privilege management and, thus, management of containment domains. Allowing versatile redundancy management, Midir promotes resilience for all software levels, including at low level. We explain this architecture, its associated algorithms and hardware mechanisms and show, for the example of a Byzantine fault tolerant microhypervisor, that it outperforms the highly efficient MinBFT by one order of magnitude.

Audit Optimization Based on Computer Vision Technology

Research Purposes: The project is based on the traditional accounting audit platform, on the basis of technical research, to re-create a three-party relationship, widely used data platform. Research Methodology: We use the SQL Server database data storage principle, the original documents and other first-hand information direct electronic storage. Research Results: It will not only increase file sharing and privilege management algorithms, but also prevent first-hand data modification, and the use of more intelligent embedded management of various modules to protect the three parties to exercise their legitimate rights and interests on the platform.

A Case Study of Islamic Financial Institutions of Pakistan: Challenges & Growth

The purpose of this research paper was to find the growth of Islamic financial institutions for the economic development of Pakistan. Also, this study highlighted issues and constraints against the growth of Islamic banking in Pakistan. Islamic banking was based on the current model of products of conventional banking to achieve the general objectives of Islamic economic that was insufficient and based on the fair distribution of economic profits and render the Islamic financing more efficient from their conventional equivalents. The study contained major issues such as lack of treasury and liquidity risk management, regulatory, legal and tax environment, several interpretations of Sharia ruling, lender of last resort facility, lack of Sukuk offered in secondary markets. The study found that in Pakistan, the growth and development of Islamic financial institutions were very low compared to other Muslims and non-Muslim countries need to improve the performance of the Islamic banks' mode, and it is not too late to plan on those constraint strategies and implantation to avoid those constraints. This study will facilitate privileged management to lay down policies so that the Islamic banking operations develop low-income countries such as Pakistan.

TraduXio Project: Latest Upgrades and Feedback

TraduXio is a digital environment for computer assisted multilingual translation which is web-based, free to use and with an open source code. Its originality is threefold-whereas traditional technologies are limited to two languages (source/target), TraduXio enables the comparison of different versions of the same text in various languages; its concordancer provides relevant and multilingual suggestions through a classification of the source according to the history, genre and author; it uses collaborative devices (privilege management, forums, networks, history of modification, etc.) to promote collective (and distributed) translation. TraduXio is designed to encourage the diversification of language learning and to promote a reappraisal of translation as a professional skill. It can be used in many different ways, by very diverse kind of people. In this presentation, I will present the recent developments of the software (its version 2.1) and illustrate how specific groups (language teaching, social sciences, literature) use it on a regular basis. In this paper, I present the technology but concentrate more on the possible uses of TraduXio, thus focusing on translators' feedback about their experience when working in this digital environment in a truly collaborative way.

The Application of Blockchain of Custody in Criminal Investigation Process

With the advancing technologies become tools for illicit activities and avoid detection, digital forensics is necessary for law enforcement in modern criminal investigations. In order to maintain the integrity and authenticity of the evidence, a chain of custody is essential for the successful prosecution of criminals in court. However, it is a great challenge to manage the preservation and collection of digital evidence because of its fragile and volatile in nature. Blockchain has been proposed as a promising and reliable technology to provide immutability and traceability of digital content, however, the applications of blockchain to the law enforcement agencies (LEAs) requires special attention to the security issue. In this research, we proposed a blockchain of custody framework to facilitate the security and transparency of digital evidence in criminal investigation process. The framework is implement on Ethereum smart contract to support authenticity and integrity of digital evidence in preliminary investigation, case management and court phases. We also propose the role of investigator to leverage access control in evidence creation, transferring and modification. The corresponding actions with judicial process is simulated using private ethereum blockchain. The experimental results indicate that the proposed framework can prevent digital evidence been tampered or contaminated and assure its legal defensibility with rigorous privilege management. Moreover, by successfully synchronizing digital evidence transactions to multiple nodes ensures the accountability of evidence data for every involved law enforcement agency.

Research on Information Security Defense Based on Improved Identity-Based Dynamic Clustering Authentication Algorithm

Big data and artificial intelligence technology, as the unified means and carrier for collecting, storing and computing core data of contemporary power IoT, has diverse and complex characteristics of its data sources and types. And the lack of insecure data access, abnormal response and terminal access rights control leads to the failure of the integrity and credibility of the closed-loop information defense. In particular, wireless sensor networks (WSNs) in power scenarios are more susceptible to malicious attacks. To address the above problems, this paper proposes a power IOT information defense strategy based on improved identity-based dynamic clustering authentication algorithm (IIDC). First, the terminal device sets the private key to solve the key escrow problem of terminal security authentication in the IOT model. At the same time, the improved algorithm dynamically generates pseudo-cryptographic matrix to avoid collusion attack. Finally, a hierarchical privilege management mechanism is adopted to decrypt the terminal authentication once. The proposed algorithm is more suitable for terminal security access and power consumption requirements in WSN-based power IOT scenario, as verified by experimental simulation.

Fuzzy-Based Trustworthiness Evaluation Scheme for Privilege Management in Vehicular Ad Hoc Networks

The vehicular ad hoc network (VANET) is a type of mobile wireless networks, where vehicles are allowed to broadcast a message to its neighbors and access data from other participants. However, how to guarantee the reliability of these broadcast messages and prevent malicious vehicles from accessing the private data of the VANETs is still an open problem to be solved. As a countermeasure, a fuzzy-based trustworthiness evaluation scheme for privilege management in VANETs is proposed in this article. In the proposed scheme, to ensure the result of trustworthiness is valid, mutual authentication with conditional anonymity between the evaluator and the vehicle to be evaluated is first employed. Then, based on the vehicle's behavioral big data, the trustworthiness of each vehicle is evaluated by utilizing the fuzzy theory. Note that the privilege of a vehicle and the reliability of the vehicle's messages are determined by its trustworthiness. Moreover, the mobility of vehicles is also considered in this article, since the location of a vehicle is not constant and the monitoring area of an road side unit is limited. The results of theoretical and experimental analyses demonstrate that the proposed scheme performs well in terms of security and efficiency.

Ontology-Based Holonic Event-Driven Architecture for Autonomous Networked Manufacturing Systems

The current trends in personalized products drive the paradigms of production systems toward autonomous networked manufacturing systems. This article proposes an ontology-based holonic event-driven architecture for implementing loosely coupled, holonic, autonomous distributed systems. The event-driven architecture (EDA) enables the services provided by different organizations and their suborganizations to be autonomously configured and integrated, while ensuring that the predefined organizational event access rules are compulsorily followed. This is realized by organizing the event services in a holonic manager and modeling the knowledge of services via the ontology developed in this study. The ontology model and the corresponding autonomous configuration mechanism are introduced. We developed a demonstration case to elaborate our approach and implemented a testbed using Java-based technology for testing the effectiveness, efficiency, scalability, and reliability of the proposed approach. Note to Practitioners —The ever-changing customer demands, the volatile market, and the trend of mass personalization require manufacturing systems to be smart in the event of uncertainties. To this end, information sharing in the supply chain is a key factor. However, there are several barriers in implementing a cross-organizational information system, including security, access privileges, and system interoperability. To lift these barriers, this article proposes an ontology model and a hierarchical EDA. Compared with conventional architectures, our approach facilitates the management of access privileges, integration of interorganizational information systems, and their interoperation. Moreover, our approach is competitive compared with the conventional service-oriented architecture in terms of both scalability and reliability of the system. Before the proposed approach can be practically applied, the ontology model needs to be further extended, and the event registration and message exchange protocol need to be standardized.

Programas de avaliação da agenda do governo na recente Argentina: discursos, ações e institucionalidades de políticas voltadas à melhoria da qualidade educacional durante a gestão de Cambiemos (2015-2019)

This article analyzes the orientation of educational evaluation policies at the national level within the framework of conservative restoration in Argentina. Based on a qualitative study, the paper analyzes the institutional frameworks of the evaluation programs and the interventions developed during the years 2015-2019 as well as the views of the different actors responsible for their design and implementation. The findings suggest a process of re-evaluation of the measurement of learning through standardized tests as a privileged management tool, which differs from the limited importance that these devices had during the previous period, within the framework of broader policies aimed at ensuring equality and inclusion.

Privileges of Pharmacist in Saudi Arabia: Administration and Management

PTB Reports,2020,6,1,7-12.DOI:10.5530/PTB.2020.6.2Published:March 2020Type:Research ArticleAuthors:Faisal Al-Otaibi, Mohamed Soliman Imam, Randa Mansour Abdel-Sattar Ahmed, Amsha Alotaibi, Asma Alotaibi, Amal Alotaibi, Wesam Alsuwaid, and Yousef Ahmed Alomi Author(s) affiliations:Faisal Al-Otaibi, Ph. D, Assistant Professor, College of Pharmacy, Pharmacy Patrice Department, Shaqra University, Saudi Arabia. Mohamed Soliman Imam, Ph. D, Assistant Professor, Dean, College of Pharmacy, Shaqra University, Saudi Arabia. Randa Mansour Abdel-Sattar Ahmed, Ph.D, Biomedical Science Department, College of Pharmacy, Shaqra University, Saudi Arabia. Amsha Alotaibi, Pharm D, Clinical Pharmacist, College of Pharmacy, Pharmacy Patrice Department, Shaqra University, Riyadh, Saudi Arabia. Asma Alotaibi, Pharm D, Clinical Pharmacist, College of Pharmacy, Pharmacy Practice Department, Shaqra University, Saudi Arabia. Amal Alotaibi, Pharm D, Clinical Pharmacist, College of Pharmacy, Shaqra University, Saudi Arabia. Wesam Alsuwaid, Pharm D, Clinical Pharmacist, College of Pharmacy, Pharmacy Practice Department, Shaqra University, Saudi Arabia. Yousef Ahmed Alomi*, BSc. Pharm, MSc. Clin Pharm, BCPS, BCNSP, DiBA, CDE, Critical Care Clinical Pharmacists, TPN Clinical Pharmacist, Freelancer Business Planner, Content Editor and Data Analyst, P.O.BOX 100, Riyadh, Saudi Arabia. Abstract:Objectives: To explore the privileges of pharmacists through the pharmacy administration and management in Saudi Arabia. Methods: This is a 4-month cross-sectional survey regarding the privileges of pharmacists in Saudi Arabia. The study consisted of two parts: the first part collected demographic information and the second part comprised a questionnaire with 28 questions divided into 4 domains. The questions were derived from previous literature and from the regulatory standards of the American Society of Health-System Pharmacists (ASHP). The four domains were as follows: privilege management and resources, pharmacist prescribing and therapeutic interchange, clinical and administration privilege and drug monitoring and healthcare education. The responses were obtained using a 5-point Likert response scale system with close- and open-ended questions. The survey questionnaire was distributed in an electronic format to the hospital’s director of pharmacy of each hospital in Saudi Arabia. In this study, we analyzed pharmacist’s privilege in Saudi Arabia with regard to the pharmacy administration and management. All data were obtained through the Survey Monkey system. Results: The survey was distributed to 36 hospitals. The administration-related elements of pharmacist privilege with maximum score were policies and procedures of pharmacist’s privilege (3.88 (77.6%)) followed by the vision of pharmacist privilege (3.57 (71.4%)) and pharmacist privilege in the job description (3.56 (71.2%)). The average score of pharmacist privilege in the hospital committees was 3.47 (69.40%). Most of the committees having pharmacist privilege was the patient or medication safety committee (4.09 (81.8%)) followed by the pharmacy and therapeutic committee (4.06 (81.2%)) and quality management committee (4.06 (81.2%)). The average score of pharmacist privilege in the teams was 3.44 (68.85%). The majority of the teams having pharmacist privilege was antibiotics team (4.25 (85%)) followed by anticoagulation team (3.86 (77.2%)) and IV therapy team (3.81 (76.2%)). Conclusion: The privileges of a pharmacists is inadequate in the Kingdom of Saudi Arabia. Future programs should target to improve the healthcare system and expand pharmacists’ role in the hospital practice. This might improve the pharmaceutical care services and patient outcomes and prevent drug-related problems and unnecessary economic expenditure on the healthcare practice in Saudi Arabia. Keywords:Administration, Management, Pharmacist, Privileges, Saudi ArabiaView:PDF (213.19 KB) PDF PDF Images Responders’ experiences of pharmacy practice

A Quantum Authorization Management Protocol Based on EPR-Pairs

Quantum authorization management (QAM) is the quantum scheme for privilege management infrastructure (PMI) problem. Privilege management (authorization management) includes authentication and authorization. Authentication is to verify a user’s identity. Authorization is the process of verifying that a authenticated user has the authority to perform a operation, which is more fine-grained. In most classical schemes, the authority management center (AMC) manages the resources permissions for all network nodes within the jurisdiction. However, the existence of AMC may be the weakest link of the whole scheme. In this paper, a protocol for QAM without AMC is proposed based on entanglement swapping. In this protocol, Bob (the owner of resources) authenticates the legality of Alice (the user) and then shares the right key for the resources with Alice. Compared with the other existed QAM protocols, this protocol not only implements authentication, but also authorizes the user permissions to access certain resources or carry out certain actions. The authority division is extended to fin-grained rights division. The security is analyzed from the four aspects: the outsider’s attack, the user’s attack, authentication and comparison with the other two QAM protocols.

RootAgency: A digital signature-based root privilege management agency for cloud terminal devices

Rooting an Android device can be a voluntary behavior from end users with various motivations, such as removing OEM pre-installed apps. This leads to an increase in opportunity of privilege escalation for malwares. The existing root privilege management schemes rely on the end users to make privilege granting decisions for all legal and illegal apps installed on the device. However, unskilled end users are incapable, or are careless in determining which privileges are appropriate for what type of app. To address this issue, a root privilege management agency named RootAgency is proposed, which adopts a digital signature scheme to guarantee the exclusive root-privilege-granting opportunities of authenticated apps. RootAgency authenticates an app by checking whether it holds the signature generated by the secret key, and grants the root privilege when a signed app submits the request. Moreover, it verifies the app’s integrity to prevent it from repackaging. Thus, the users are not involved in decision making while confronting root requests. The proposed scheme ensures the security of rooted Android devices, and enhances the security of mobile terminal devices. This diminishes the threat to cloud infrastructure from root-misused Android devices. In addition, a prototype is implemented to evaluate its effectiveness, efficiency, and overhead. The experimental results show that RootAgency is widely compatible and its performance overhead is reasonable.

Management of access privileges for dynamic access control

Access control is an important security mechanism for the protection of sensitive information and critical system resources. While it has been well-known that traditional access control models (TACMs), such as DAC, MAC, RBAC, etc., are not well suited for open networks due to the lack of dynamism in the management of access privileges, pro-active or dynamic access control models (PACMs) developed in recent years generally suffer from performance problems due to complex evaluation performed prior to access authorization. In game theory based dynamic access control models, which are one type of dynamic models, each access is modeled as a game that is played between the accessing subject and the accessed or protected object and the result of the play serves as the basis for making the authorization decision. Thus, delay is unavoidably introduced into the authorization process due to such pre-access evaluation. To overcome the shortcomings of TACMs and PACMs simultaneously, in this paper, we propose a new access control model called ISAC that, unlike all present access control models, is used not as a mechanism for access authorization but one for dynamic management of access privileges upon the completion of each access with the result being an updated set of access privileges for the accessing subject and used for updating the corresponding access control list for the subject. Access authorization will still be performed in the same way as that in the traditional access control models. Thus, ISAC offers the advantages of both traditional access control models in performance and pro-active access control models in dynamism. We will apply incomplete information static game to the development of ISAC in which we will show that there exists at least one Bayesian Nash equilibrium for the game play, which is the theoretical foundation for ISAC. We will also describe a framework design and an example implementation to illustrate the application of ISAC to access control. At last, we will present some experimental results to show that while maintaining the effectiveness of dynamic access control through the management of access privileges, ISAC can achieve the performance of traditional access control models.

A root privilege management scheme with revocable authorization for Android devices

As a critical part in mobile cloud computing, the vulnerability of Android devices can directly affect the security of the mobile cloud. The unsecured Android can be potentially exploited by malwares to obtain the root privilege. Root privilege misuse is the critical issue for Android security, which breaks the integrity of Android security and rises the risk of permission escalation from malwares. The existing solutions still fail to balance the trade-off between the users desires on using root privilege and the Android security, which lays risks in leading to the root privilege misuse. To address this issue, a root privilege management scheme named Root Privilege Manager (RPM) is proposed, which adopts the root privilege access control to guarantee the exclusive root access opportunity of the authenticated apps. RPM verifies the authorization and integrity of root requesting apps based on the extracted authorization files during app installation, and then root access management controls the granting of root privilege based on the authenticated results. In this way, the end users are free from the embarrassment of appropriate decision-making while confront root access management. The prototype of RPM is implemented to evaluate its effectiveness, efficiency and performance. The experiments show RPM can effectively control the granting of root privilege and the time consumption in root access management is increased by 0.21%–0.94% respectively compared with the user management.

Analysis on the current performance and countermeasures on privilege management of medical qualifications in China

Beginning with an introduction to overseas practices of privilege management, this paper analyzed the current privilege management of medical qualifications in China. On such basis, the authors introduced their insights and specific recommendations for the design and implementation of such management in China. These include: a platform for privilege management, a classified catalogue for medical qualifications, a procedure for the application, approval, examination and dynamic management of the qualifications, and an informatization platform for privilege management. Key words: Medical qualifications; Qualifications management; Previlige management; Countermeasures

A Flexible Solution for Privilege Management and Access Control in EHR Systems

Background: Inter-organizational healthcare businesses are ruled by a huge set of policies: legal policies, organizational policies, medical policies, ethical policies, etc., which are quite static, patients policy and process, social and environmental conditions, which are highly dynamic. In the context of a business case, those diff erent policies must be harmonized to enable privilege management and access control decisions. Objectives: The authors off er a methodology to achieve interoperability through policies harmonization in a privilege management and access control solution for EHR systems, to be later on implemented in a cancer care network using HL7 specifications. Methods: To meet the objective, the authors make use of a system-theoretical, architecture-centric, ontology-based approach to formally representing the aforementioned polices for harmonization. Results: Because of its fl exibility and generality, a policydriven RBAC model is used to formally represent all the other access control models such as MAC, DAC, RBAC, ABAC, HL7 Data Segmentation and Labeling Services. All the policies deployed in the context of an inter-organizational collaboration for cancer care can be formalized and then harmonized. Conclusions: The authors provide an implementation independent methodology to enable policies harmonization in EHR systems. The methodology described in the paper is independent on the maturity of organizations’ privilege management and access control system. Furthermore, it does not hamper organizations progressing to more advanced solutions over the time. Even dynamic policies can be harmonized at run time, allowing advancement towards a patient-centered care.

Secure-channel free keyword search with authorization in manager-centric databases

Public key encryption with keyword search (PEKS) provides the functionality of encrypted data retrieval with keyword privacy in database systems. PEKS allows a user to specify a keyword and search the encrypted data associated with this keyword that is uploaded by others. In this paper, we investigate the retrieval privilege management in the manager-centric model, where each user has a different search right over the unique keyword set. Unfortunately, employing the prior PEKS and other related cryptographic techniques might suffer from the problems of key abuse and bandwidth consumption. To address these issues, we introduce a new cryptographic primitive called public key encryption with authorized keyword search (PEAKS). In PEAKS, the search right is assigned by the authority over a distinct keyword set and the user with an authorized search right can only search data associated with these keywords. We propose two constructions with formal security proof, namely the basic PEAKS scheme and the secure channel-free PEAKS (SCF-PEAKS) scheme. Both schemes feature with the constant-size authorized token, while the SCF-PEAKS scheme is also resistant against the outsider keyword guessing attacks. The performance evaluation shows that the proposed schemes consume less bandwidth for frequent token update.

Access control and privilege management in electronic health record: a systematic literature review.

This study presents a systematic literature review of access control for electronic health record systems to protect patient's privacy. Articles from 2006 to 2016 were extracted from the ACM Digital Library, IEEE Xplore Digital Library, Science Direct, MEDLINE, and MetaPress using broad eligibility criteria, and chosen for inclusion based on analysis of ISO22600. Cryptographic standards and methods were left outside the scope of this review. Three broad classes of models are being actively investigated and developed: access control for electronic health records, access control for interoperability, and access control for risk analysis. Traditional role-based access control models are extended with spatial, temporal, probabilistic, dynamic, and semantic aspects to capture contextual information and provide granular access control. Maintenance of audit trails and facilities for overriding normal roles to allow full access in emergency cases are common features. Access privilege frameworks utilizing ontology-based knowledge representation for defining the rules have attracted considerable interest, due to the higher level of abstraction that makes it possible to model domain knowledge and validate access requests efficiently.

Abstract IA08: Heterogeneous data management and integration for living biobanks

Abstract IA08: Heterogeneous data management and integration for living biobanks