Cloud-Based Access Control Framework for Effective Role Provisioning in Business Application

In the evolution of social networks and big data, secure information sharing is a crucial task. When information is shared between the user and the organization admin, security plays a key role in any business organization in terms of privacy. Though many fruitful solutions prevail to protect the data integrity and privacy, there is a huge space for novel data protection schemes where a large set of data are involved. In this article, the Cloud-Based Access Control (C-BAC) framework is proposed which can fit in any business organization application. In this C-BAC, Policy Enforcement Point (PEP) is used to avoid unwanted information sharing with the neighboring employee. C-BAC framework with RSA provides security, based on the number of employees with the data handled by the particular employee, better than the existing access control framework with asymmetric encryption standard (AES) and Rivest–Shamir–Adleman (RSA) in terms of individual information handling.

Download Full-text

Towards Risk-aware Access Control Framework for Healthcare Information Sharing

Proceedings of the 4th International Conference on Information Systems Security and Privacy ◽

10.5220/0006608103120321 ◽

2018 ◽

Cited By ~ 2

Author(s):

Mohamed Abomhara ◽

Geir M. Køien ◽

Vladimir A. Oleshchuk ◽

Mohamed Hamid

Keyword(s):

Access Control ◽

Information Sharing ◽

Healthcare Information ◽

Control Framework

Download Full-text

oGBAC--A Group Based Access Control Framework for Information Sharing in Online Social Networks

IEEE Transactions on Dependable and Secure Computing ◽

10.1109/tdsc.2018.2875697 ◽

2018 ◽

pp. 1-1

Author(s):

Donghui Hu ◽

Chunya Hu ◽

Yuqi Fan ◽

Xintao Wu

Keyword(s):

Social Networks ◽

Access Control ◽

Information Sharing ◽

Online Social Networks ◽

Control Framework

Download Full-text

Access control for secure information sharing in smart content spaces

Journal of Information Security and Applications ◽

10.1016/j.jisa.2016.12.002 ◽

2017 ◽

Vol 34 ◽

pp. 63-75 ◽

Cited By ~ 1

Author(s):

Brian Greaves ◽

Marijke Coetzee

Keyword(s):

Access Control ◽

Information Sharing ◽

Secure Information ◽

Secure Information Sharing

Download Full-text

PEP4Django A Policy Enforcement Point for Python Web Applications

10.5753/wgid.2019.14021 ◽

2019 ◽

Author(s):

Carlos Eduardo Da Silva ◽

Welkson De Medeiros ◽

Silvio Sampaio

Keyword(s):

Access Control ◽

Web Application ◽

Web Applications ◽

Policy Enforcement ◽

Control Mechanisms ◽

Business Logic ◽

Control Policies ◽

Control Rules ◽

Access Control Policies ◽

Policy Enforcement Point

Traditionally, access control mechanisms have been hard-coded into application components. Such approach is error-prone, mixing business logic with access control concerns, and affecting the ﬂexibility of security policies, as is the case with IFRN SUAP Django-based system. The externalization of access control rules allows their decoupling from business logic, through the use of authorization servers where access control policies are stored and queried for computing access decisions. In this context, this paper presents an approach that allows a Django Web application to delegate access control decisions to an external authorization server. The approach has been integrated into an enterprise level system, which has been used for experimentation. The results obtained indicate a negligible overhead, while allowing the modiﬁcation of access control policies without interrupting the system.

Download Full-text

Evaluation of a policy enforcement solution in telemedicine with offline use cases

Pollack Periodica ◽

10.1556/606.2021.00383 ◽

2021 ◽

Author(s):

Zoltán Szabó

Keyword(s):

Internet Of Things ◽

Access Control ◽

Edge Computing ◽

Use Cases ◽

Policy Enforcement ◽

Multiple Points ◽

Healthcare Data ◽

Control Framework

Abstract The emerging popularity of telemedicine solutions brought an alarming problem due to the lack of proper access control solutions. With the inclusion of multi-tiered, heterogeneous infrastructures containing Internet of things and edge computing elements, the severity and complexity of the problem became even more alarming, calling for an established access control framework and methodology. The goal of the research is to define a possible solution with a focus on native cloud integration, possible deployment at multiple points along the path of the healthcare data, and adaptation of the fast healthcare interoperability resources standard. In this paper, the importance of this issue in offline use cases is presented and the effectiveness of the proposed solution is evaluated.

Download Full-text

An Adaptive Data Distribution Through Tree Rules in Frequent Pattern Mining

International Journal of Scientific Research in Computer Science Engineering and Information Technology ◽

10.32628/cseit183894 ◽

2018 ◽

pp. 300-305

Keyword(s):

Information Sharing ◽

Pattern Mining ◽

Data Distribution ◽

Frequent Pattern Mining ◽

Frequent Pattern ◽

General Development ◽

Secure Information ◽

Evaluation Parameters ◽

Secure Information Sharing

Information sharing among the associations is a general development in a couple of zones like business headway and exhibiting. As bit of the touchy principles that ought to be kept private may be uncovered and such disclosure of delicate examples may impacts the advantages of the association that have the data. Subsequently the standards which are delicate must be secured before sharing the data. In this paper to give secure information sharing delicate guidelines are bothered first which was found by incessant example tree. Here touchy arrangement of principles are bothered by substitution. This kind of substitution diminishes the hazard and increment the utility of the dataset when contrasted with different techniques. Examination is done on certifiable dataset. Results shows that proposed work is better as appear differently in relation to various past strategies on the introduce of evaluation parameters.

Download Full-text