Community-Centric Brokerage-Aware Access Control for Online Social Networks

Asim, Yousra; Raza, Basit; Naeem, Wajeeha; Rathore, Saima

doi:10.1016/j.future.2018.08.023

Cited by 7 publications

(4 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These roles and trust assessments provide more accurate and feasible information sharing decisions and better control of privacy in social networks. Asim et al 14 proposed a community‐centered broker‐aware access control (CBAC) model, which uses important concepts from social network analysis (SNA), namely broker, one‐to‐many relationship, temporary relationship, and emerging access control models such as attribute‐based and trust‐based access control and decentralized strategies. Xu et al 15 proposed a trust‐based access control mechanism Trust2Privacy to protect the privacy of users after releasing information, which can effectively realize the conversion from trust to privacy.…”

Section: Related Workmentioning

confidence: 99%

A smart access control mechanism based on user preference in online social networks

Shan

2022

Concurrency and Computation

View full text Add to dashboard Cite

SummaryAccess control can effectively protect users' data and privacy in social networks. Different access control models address different data privacy requirements, and the corresponding implementation technologies and performance are also quite different. The existing access control mechanisms of social networks rarely take into account the individual preferences of users, and cannot provide personalized services for users. Therefore, we have studied an analysis mechanism of user preference to quantify user preferences, and then use user preference values and some key information of users' social resources as decision vectors, and proposed an access control mechanism based on user preference (ACMBUP). ACMBUP turns the problem of access decision‐making into a problem of classification, that is, whether to allow access or not to allow access. At the same time, we add an encryption and decryption mechanism in ACMBUP to prevent data leakage and protect data when users interact with access mechanisms. Experiments show that this mechanism can automatically generate appropriate access control policies to meet the potential privacy needs of different users, so as to better protect the privacy of social networks data.

show abstract

Section: Related Workmentioning

confidence: 99%

A smart access control mechanism based on user preference in online social networks

Shan

2022

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Combined context of team collaboration and workflow was proposed in [23]. Task-based access control system for dynamic multi-domain environment is proposed in social network domain in the form of multiple social communities [24]. Role mining and role engineering are the main concerned research areas in RBAC research.…”

Section: Related Workmentioning

confidence: 99%

Intelligent Role-Based Access Control Model and Framework Using Semantic Business Roles in Multi-Domain Environments

et al. 2020

Self Cite

View full text Add to dashboard Cite

Today's rapidly developing communication technologies and dynamic collaborative business models made the security of data and resources more crucial than ever especially in multi-domain environments like Cloud and Cyber-Physical Systems (CPS). It enforced the research community to develop enhanced access control techniques and models for resources across multi-domain distributed environments so that the security requirements of all participating organizations can be fulfilled through considering dynamicity of changing environments and versatility of access control policies. The popularity of Role-Based Access Control (RBAC) model is irrefutable because of low administrative overhead and largescale implementation in business organizations. However, it does not incorporate the dynamically changing policies and lacks semantically meaningful business roles which could have a diverse impact upon access decisions in multi-domain business environments. This paper describes our proposed novel access control framework that uses semantic business roles and intelligent agents through implementation of our Intelligent RBAC (I-RBAC) model. It encompasses occupational entitlements as roles for multiple domains. We use the dataset of original occupational roles provided by Standard Occupational Classification (SOC), USA. The novelty of the paper lies in developing a core I-RBAC ontology using real-world semantic business roles and intelligent agent technologies together for achieving required level of access control in highly dynamic multi-domain environment. The intelligent agents use WordNet and bidirectional LSTM deep neural network for automated population of organizational ontology from unstructured text policies. This dynamically learned organizational ontology is further matched with our core I-RBAC ontology in order to extract unified semantic business roles. The proposed I-RBAC model is mathematically described and the overall I-RBAC framework and its implementation architecture is explained. At the end, the I-RBAC model is validated through the implementation results that show a linear runtime trend of the model in presence of a large number of permission assignments and multiple queries.

show abstract

“…Brokerage and community aspects are important in SN research. A community-centric brokerage-aware access control model is formally described in [106].…”

Section: Relationship-based Access Control (Rebac)mentioning

confidence: 99%

From Conventional to State-of-the-Art IoT Access Control Models

et al. 2020

Self Cite

View full text Add to dashboard Cite

The advent in Online Social Networks (OSN) and Internet of Things (IoT) has created a new world of collaboration and communication between people and devices. The domain of internet of things uses billions of devices (ranging from tiny sensors to macro scale devices) that continuously produce and exchange huge amounts of data with people and applications. Similarly, more than a billion people are connected through social networking sites to collaborate and share their knowledge. The applications of IoT such as smart health, smart city, social networking, video surveillance and vehicular communication are quickly evolving people’s daily lives. These applications provide accurate, information-rich and personalized services to the users. However, providing personalized information comes at the cost of accessing private information of users such as their location, social relationship details, health information and daily activities. When the information is accessible online, there is always a chance that it can be used maliciously by unauthorized entities. Therefore, an effective access control mechanism must be employed to ensure the security and privacy of entities using OSN and IoT services. Access control refers to a process which can restrict user’s access to data and resources. It enforces access rules to grant authorized users an access to resources and prevent others. This survey examines the increasing literature on access control for traditional models in general, and for OSN and IoT in specific. Challenges and problems related to access control mechanisms are explored to facilitate the adoption of access control solutions in OSN and IoT scenarios. The survey provides a review of the requirements for access control enforcement, discusses several security issues in access control, and elaborates underlying principles and limitations of famous access control models. We evaluate the feasibility of current access control models for OSN and IoT and provide the future development direction of access control for the same.

show abstract

Community-Centric Brokerage-Aware Access Control for Online Social Networks

Cited by 7 publications

References 34 publications

A smart access control mechanism based on user preference in online social networks

A smart access control mechanism based on user preference in online social networks

Intelligent Role-Based Access Control Model and Framework Using Semantic Business Roles in Multi-Domain Environments

From Conventional to State-of-the-Art IoT Access Control Models

Contact Info

Product

Resources

About