Attribute-Guard: Attribute-Based Flow Access Control Framework in Software-Defined Networking

With the emergence of Web Services-based collaborative systems, new issues arise, in particular those related to security. In this context, Web Service access control should be studied, specified and enforced. This work proposes a new access control framework for Inter-Organizational Web Services: “PolyOr- BAC”. On the one hand, the authors extend OrBAC (Organization-Based Access Control Model) to specify rules for intra- as well as inter-organization access control; on the other hand, they enforce these rules by applying access control mechanisms dedicated to Web Services. Furthermore, the authors propose a runtime model checker for the interactions between collaborating organizations, to verify their compliance with previously signed contracts. In this respect, not only their security framework handles secure local and remote accesses, but also deals with competition and mutual suspicion between organizations, controls the Web Service workflows and audits the different interactions. In particular, every deviation from the signed contracts triggers an alarm, the concerned parties are notified, and audits can be used as evidence for a judge to sanction the party responsible for the deviation.

Download Full-text

PolyOrBAC

Virtual Communities ◽

10.4018/978-1-60960-100-3.ch211 ◽

2011 ◽

pp. 537-557

Author(s):

Anas Abou El Kalam ◽

Yves Deswarte

Keyword(s):

Web Services ◽

Access Control ◽

Web Service ◽

Service Access ◽

Control Mechanisms ◽

Model Checker ◽

Control Framework ◽

The One ◽

Organization Based Access Control ◽

The Web

With the emergence of Web Services-based collaborative systems, new issues arise, in particular those related to security. In this context, Web Service access control should be studied, specified and enforced. This work proposes a new access control framework for Inter-Organizational Web Services: “PolyOr- BAC”. On the one hand, the authors extend OrBAC (Organization-Based Access Control Model) to specify rules for intra- as well as inter-organization access control; on the other hand, they enforce these rules by applying access control mechanisms dedicated to Web Services. Furthermore, the authors propose a runtime model checker for the interactions between collaborating organizations, to verify their compliance with previously signed contracts. In this respect, not only their security framework handles secure local and remote accesses, but also deals with competition and mutual suspicion between organizations, controls the Web Service workflows and audits the different interactions. In particular, every deviation from the signed contracts triggers an alarm, the concerned parties are notified, and audits can be used as evidence for a judge to sanction the party responsible for the deviation.

Download Full-text

Toward a flexible and fine-grained access control framework for infrastructure as a service clouds

Security and Communication Networks ◽

10.1002/sec.1216 ◽

2015 ◽

Vol 9 (15) ◽

pp. 2730-2743

Author(s):

Bo Li ◽

Jianxin Li ◽

Lu Liu ◽

Chao Zhou

Keyword(s):

Access Control ◽

Infrastructure As A Service ◽

Fine Grained ◽

Control Framework

Download Full-text

Application of IEEE802.1x Protocol Based on EPON System

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.336-338.2433 ◽

2013 ◽

Vol 336-338 ◽

pp. 2433-2437

Author(s):

Huang Zhi ◽

Xiang Qun Wang ◽

Wei Chen

Keyword(s):

Access Control ◽

Communication System ◽

Low Cost ◽

Distribution Network ◽

Authentication Protocol ◽

Network Communication ◽

Network Access ◽

Authentication Protocols ◽

Network Access Control ◽

The One

IEEE 802.1x is a port-based network access control protocol, the one of the newest authentication protocols. With the MD5 algorithm as an example, this paper introduces the type of protocol packets and the authentication process in detail. The authentication port is apart from the business stream based on the logical port. The business stream is transmitted over the controlled port, but the authentication stream is transmitted over the uncontrolled port. Therefore, the port control and authorization for users can be carried out. In this paper, two authentication methods based on EPON system are studied in detail. The 802.1x authentication protocol has many advantages, such as low-cost, simply and so on. It can satisfy the requirement of intelligent distribution network communication system.

Download Full-text