An adaptive access control model with privileges overriding and behaviour monitoring in wireless sensor networks

et al. 2014

JSAN

Self Cite

copyright 2014 by the authors; licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution license (http://creativecommons.org/licenses/by/3.0/)Wireless sensor networks (WSNs) have attracted considerable interest in the research community, because of their wide range of applications. However, due to the distributed nature of WSNs and their deployment in remote areas, these networks are vulnerable to numerous security threats that can adversely affect their proper functioning. Resource constraints in sensor nodes mean that security mechanisms with a large overhead of computation and communication are impractical to use in WSNs; security in sensor networks is, therefore, a challenge. Access control is a critical security service that offers the appropriate access privileges to legitimate users and prevents illegitimate users from unauthorized access. However, access control has not received much attention in the context of WSNs. This paper provides an overview of security threats and attacks, outlines the security requirements and presents a state-of-the-art survey on access control models, including a comparison and evaluation based on their characteristics in WSNs. Potential challenging issues for access control schemes in WSNs are also discussed

Section: Attribute-based Encryption (Abe)-based Fine-grained Access Cmentioning

confidence: 99%

A Survey of Access Control Models in Wireless Sensor Networks

et al. 2014

JSAN

Self Cite

“…Maw et al [6], [7] proposed an Adaptive Access Control (A2C) model with privilege overriding and behaviour monitoring to provide fine-grained access control for medical data in WSNs. This model has a similar structure to BTG-RBAC [1] but the main difference is that no human effort is needed to override rules and policies because of an introduction of the users' behaviour trust model, and the prevention and detection mechanism.…”

Section: Related Workmentioning

confidence: 99%

An evaluation of break-the-glass access control model for medical data in wireless sensor networks

2014 IEEE 16th International Conference on E-Health Networking, Applications and Services (Healthcom)

et al. 2014

Self Cite

Wireless Sensor Networks (WSNs) have recently attracted a lot of attention in the research community because it is easy to deploy them in the physical environment and collect and disseminate environmental data from them. The collected data from sensor nodes can vary based on what kind of application is used for WSNs. Data confidentiality and access control to that collected data are the most challenging issues in WSNs because the users are able to access data from the different location via ad-hoc manner. Access control is one of the critical requirements to prevent unauthorised access from users. The current access control models in information systems cannot be applied straightforwardly because of some limitations namely limited energy, resource and memory, and low computation capability. Based on the requirements of WSNs, we proposed the Break-The-Glass Access Control (BTG-AC) model which is the modified and redesigned version of Break-The-Glass Role-Based Access Control (BTG-RBAC) model. The several changes within the access control engine are made in BTG-RBAC to apply and fit in WSNs. We developed the BTG-AC model in Ponder2 package. Also a medical scenario was developed to evaluate the BTG-AC model for medical data in WSNs. In this paper, detail design, implementation phase, evaluation result and policies evaluation for the BTG-AC model are presented. Based on the evaluation result, the BTG-AC model can be used in WSNs after several modifications have been made under Ponder2 Package

“…Current access control models are not flexible enough to make an effective access decision at any time. Therefore, we proposed an adaptive access control model [7] to fill the gap in WSNs area. The proposed model has a similar structure like BTG access control model but the main difference is that no human effort is needed to override rules and policy for unexpected events because of the introduction of users' behaviour trust model, and prevention and detection mechanism.…”

Section: Related Workmentioning

confidence: 99%

“…Previously, we have proposed an adaptive access control model [7] to provide a flexible access decision in WSNs. The proposed model is incorporated the concept of possibility-withoverride [8] into WSN for hard-to-define and unanticipated situations.…”

Section: Adaptive Access Control Modelmentioning

confidence: 99%

An adaptive access control model for medical data in Wireless Sensor Networks

2013 IEEE 15th International Conference on E-Health Networking, Applications and Services (Healthcom 2013)

2013

Self Cite

Wireless Sensor Networks (WSNs) have recently attracted a lot of interest in the research community. The security mechanism with large overhead of computation and communication, are infeasible to apply in WSNs due to many constraints such as limited energy, resource and memory, and low computation capability. Current access control models cannot make an effective access decision in many events because access decisions are based on predefined access policies and roles. Sometimes, users may need to access important data urgently but apart from those predefined access policies, other user request will not be granted. An adaptive access control model is proposed aiming to provide a flexible and an effective access decision on user access request at any time. The proposed model is developed in Ponder2 framework with additional extensions to adapt the unexpected events by using privilege overriding and also adjust its decision based on users' behaviour trust value. A medical scenario is used as an example application to develop and evaluate the proposed model in Body Sensor Networks (BSNs) and WSNs. In this paper, detailed design, implementation phase, evaluation result and policies testing for the proposed adaptive access control model are presented. Based on an evaluation result, all the modules in the proposed access control model are cooperated to make an effective access decision.