Attribute-Based Approaches for Secure Data Sharing in Industrial Contexts

Chiquito, Alex; Bodin, Ulf; Schelén, Olov

doi:10.1109/access.2023.3240000

Cited by 7 publications

(6 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…While Role-Based Access Control (RBAC) is acclaimed for its strategic approach to minimizing insider threats, its implementation and operationalization present challenges and limitations [32]. These obstacles affect the efficiency and effectiveness of RBAC systems and highlight the nuanced complexity of mitigating insider threats within diverse organizational landscapes [33].…”

Section: Challenges and Limitations Of Rbac In Insider Threat Mitigationmentioning

confidence: 99%

From Theory to Practice: Implementing Effective Role-Based Access Control Strategies to Mitigate Insider Risks in Diverse Organizational Contexts

Marquis

2024

JERR

View full text Add to dashboard Cite

This study investigates the effectiveness of Role-Based Access Control (RBAC) systems in mitigating insider threats to database security within various organizational environments. Insider threats represent a significant challenge for database security, necessitating robust and adaptive security measures. By delineating access based on users' roles within an organization, RBAC emerges as a critical tool against such threats. Employing a quantitative research methodology, this work gathered data through a survey targeting professionals directly involved in the security and management of organizational databases across technology, finance, healthcare, and government industries. The study utilized Confirmatory Factor Analysis (CFA) and Structural Equation Modeling (SEM) to validate the measurement model and analyze the relationships between RBAC effectiveness, implementation challenges, RBAC enhancements, and their collective impact on insider threat reduction. Findings indicate that RBAC effectively reduces unauthorized access and data breaches, significantly mitigating insider threats. However, implementation challenges such as role definition complexity and adapting to dynamic access needs emerge as notable obstacles. Enhancements in RBAC, mainly through integrating technologies like machine learning and dynamic access controls, are identified as critical mediators that enhance RBAC's effectiveness. The study concludes that while RBAC is a vital tool for database security, its success depends on continuous improvement and customization to specific organizational contexts. It recommends developing continuous enhancement programs for RBAC systems, specialized training for administrators, and the customization of RBAC strategies to meet unique organizational and industry needs. These measures are crucial for optimizing RBAC's effectiveness against insider threats.

show abstract

Section: Challenges and Limitations Of Rbac In Insider Threat Mitigationmentioning

confidence: 99%

From Theory to Practice: Implementing Effective Role-Based Access Control Strategies to Mitigate Insider Risks in Diverse Organizational Contexts

Marquis

2024

JERR

View full text Add to dashboard Cite

show abstract

“…Finally, Chiquito et al in [34] survey attribute-based approaches for access control to data, focusing on policy management and enforcement. The paper aims at identifying the key properties provided by ABAC and ABE that can be used to control data access to prevent leakage to unauthorized users while providing easy-to-manage policies.…”

Section: Related Work a Security Services For Cloud Systemsmentioning

confidence: 99%

Attribute-Based Management of Secure Kubernetes Cloud Bursting

Femminella,

Palmucci,

Reali

et al. 2024

IEEE Open J. Commun. Soc.

View full text Add to dashboard Cite

In modern cloud computing, the need for flexible and scalable orchestration of services, combined with robust security measures, is paramount. In this paper, we propose an innovative approach for managing secure cloud bursting in Kubernetes, combining Attribute-Based Encryption (ABE) with Kubernetes labeling. Our model addresses the challenges of complexity, cost, and data protection compliance by leveraging both Kubernetes and ABE. We introduce an attribute-based bursting component that uses Kubernetes labels for orchestration, and an encryption component that employs ABE for data protection. This unified management model ensures data confidentiality while enabling efficient cloud bursting. Our approach combines the strengths of label-based orchestration with fine-grained encryption, providing a technologically advanced yet user-friendly solution for secure cloud bursting. We present a proof-of-concept implementation that demonstrates the feasibility and effectiveness of our model. Our approach offers a unified solution that complies with security and privacy laws while meeting the needs of contemporary cloud-based systems.

show abstract

“…These attributes serve as design properties that should be considered in the design and development of decentralized auctioning systems to ensure trust. Further information on several of these attributes can be found in previous work [24]. The main quality attributes we focus on are as follows:…”

Section: A Quality Attributes For Electronic Auctionsmentioning

confidence: 99%

“…However, in regard to open-cry (iterative) auction systems, the SotA is relatively limited in terms of research papers [15]- [17]. In a previous survey work, we analyzed decentralized auctions as a whole and concluded blockchain systems to be a promising implementation choice [18]. For this reason, we selected blockchain as the core of this paper.…”

Section: Introductionmentioning

confidence: 99%

Digitalized and Decentralized Open-Cry Auctioning: Key Properties, Solution Design, and Implementation

Chiquito,

Bodin,

Schelén

et al. 2024

IEEE Access

View full text Add to dashboard Cite

Open-cry electronic auctions have revolutionized the landscape of high-value transactions for buying and selling goods. Online platforms such as eBay and Tradera have popularized these auctions due to their global accessibility and convenience. However, these centralized auctioning platforms rely on trust in a central entity to manage and control the processing of bids, e.g., the submission time and validity. The use of blockchain technologies for constructing decentralized systems has gained popularity for their versatility and useful properties toward decentralization. However, blockchain-based open-cry auctions, are sensitive to the order of transactions and deadlines which, in the absence of a governing party, need to be provided in the system design. In this paper, we identify the key properties for the development of decentralized open-cry auctioning systems, including verifiability, transaction immutability, ordering, and time synchronization. Three prominent blockchain platforms, namely, Ethereum, Hyperledger Fabric, and R3 Corda were analyzed in terms of their capabilities to ensure these properties for gap identification. We propose a solution design that addresses these key properties and presents a proof-of-concept (PoC) implementation of such design. Our PoC uses Hyperledger Fabric and mitigates the identified gaps related to the time synchronization of this system by utilizing an external component. During the chaincode execution, the creation and submission of bids initiate requests to the time service API. This API service retrieves trusted timestamps from NTP services to obtain accurate bid times. We then analyzed the system design and implementation in the context of the identified key properties. Lastly, we conducted a performance evaluation of the time service and the PoC system implementation in timesensitive scenarios and assessed its overall performance.

show abstract

Attribute-Based Approaches for Secure Data Sharing in Industrial Contexts

Cited by 7 publications

References 38 publications

From Theory to Practice: Implementing Effective Role-Based Access Control Strategies to Mitigate Insider Risks in Diverse Organizational Contexts

From Theory to Practice: Implementing Effective Role-Based Access Control Strategies to Mitigate Insider Risks in Diverse Organizational Contexts

Attribute-Based Management of Secure Kubernetes Cloud Bursting

Digitalized and Decentralized Open-Cry Auctioning: Key Properties, Solution Design, and Implementation

Contact Info

Product

Resources

About