{"title":"Ontology-based Evaluation of ABAC Policies for Inter-Organizational Resource Sharing","authors":"T. Gupta, S. Sural","doi":"10.1145/3579987.3586572","DOIUrl":"https://doi.org/10.1145/3579987.3586572","url":null,"abstract":"Attribute-based Access Control (ABAC), as the name suggests, determines whether an access request be granted based on the attributes or characteristics of the requesting user, those of the requested resource, and the environmental condition in which the request is generated. An important advantage of such an identity-agnostic model is that access control can be imposed even on users from other organizations if they are able to prove their attributes to the reference monitor of the organization whose resources are being accessed. It would, however, require a mechanism for mapping the attributes and their values among these organizations. We propose an ontology based method for addressing this requirement. Besides meeting the needs of collaborative accesses, we show how such an approach can be made to naturally support hierarchical ABAC policies as well as controlled relaxation during policy enforcement.","PeriodicalId":327705,"journal":{"name":"Proceedings of the 9th ACM International Workshop on Security and Privacy Analytics","volume":"285 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-04-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131884155","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Adversarial Risk Analysis","authors":"David L. Banks","doi":"10.1080/09332480.2018.1467630","DOIUrl":"https://doi.org/10.1080/09332480.2018.1467630","url":null,"abstract":"Adversarial Risk Analysis (ARA) is a decision-theoretic alternative to game theory, applicable to corporate competition, auctions, and counterterrorism. In ARA, one builds a model for the strategic decision making of one's opponent(s), and then places subjective Bayesian distributions over unknown quantities. This structure enables the analyst to compartmentalize distinct kinds of uncertainty. Within this framework one can use standard Bayesian techniques to develop a probability distribution over the actions of the opponent. Given this distribution, the decision theorist chooses the action that maximizes expected utility.","PeriodicalId":327705,"journal":{"name":"Proceedings of the 9th ACM International Workshop on Security and Privacy Analytics","volume":"28 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121325844","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Proceedings of the 9th ACM International Workshop on Security and Privacy Analytics","authors":"","doi":"10.1145/3579987","DOIUrl":"https://doi.org/10.1145/3579987","url":null,"abstract":"","PeriodicalId":327705,"journal":{"name":"Proceedings of the 9th ACM International Workshop on Security and Privacy Analytics","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134149068","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}