Expressive Policy-Based Access Control for Resource-Constrained Devices

Uriarte, Mikel; Astorga, Jasone; Jacob, Eduardo; Huarte, Maider; Carnerero, Manuel

doi:10.1109/access.2017.2730958

Cited by 10 publications

(21 citation statements)

References 45 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this section, the expressive policy language detailed in [5] is summarised. The goal of this policy language is to enable the enforcement of tighter access control policies in CDSs, overcoming the resource constraints.…”

Section: Authorisation Policy Languagementioning

confidence: 99%

“…It enables to deal optimally with the elasticity defined in the policy language, avoiding unused but expected fields of expressive policies, greatly reducing the length. In the CDS side, the de-codification and enforcement are based on the same principle of beforehand construct sequence knowledge as well as the shared semantics for the injected bit masks and array lengths as detailed in [5]. With respect to covered policy formats, this authorisation policy binary representation (APBR) can easily be applied to any original policy instance format (XACML, JSON etc.…”

Section: Policy Language Codificationmentioning

confidence: 99%

“…To efficiently convey the aforementioned access control policies to the CDSs, Hidra messaging protocol is defined in [5], and briefly described hereinafter. Hidra, depicted in Fig.…”

Section: Hidra Messaging Protocolmentioning

confidence: 99%

“…Additionally, Table 5 shows the message lengths of the Hidra protocol computed with the four policy instances enclosed in the HID_CM_IND message, as well as the lengths of the fields that are subject to cryptographic operations, encryption as well as MAC computation in the CDS. Message composition and lengths per field are detailed in [5].…”

Section: Analysis Scenariomentioning

confidence: 99%

“…Such parameters have been considered to compute both the average delay and the energy consumption conveyed in Fig. 5 in the establishment of a security association, according to (4) and (9) computed on messages [1][2][3][4][5][6][7][8][9] detailed in Table 5.…”

Section: Performance Analysismentioning

confidence: 99%

See 4 more Smart Citations

Impact assessment of policy expressiveness of an optimised access control model for smart sensors

Uriarte¹,

Astorga

Jacob

et al. 2019

IET Information Security

Self Cite

View full text Add to dashboard Cite

In the incoming internet of things (IoT) applications, smart sensors expose services to interact with them, to be parameterised, managed and maintained. Therefore, fine-grained end-to-end access control enforcement is mandatory to tackle the derived security requirements. However, it is still not feasible in very constrained devices. There is an innovative access control model that conveys an expressive policy language and an optimised codification for tight and flexible access control enforcement in very constrained devices. Such tightness enabled by the expressiveness of the policy language leads to detailed policy instances that might impact on the performance and therefore, in the feasibility and further applicability. In this context, this study assesses how the policy length impacts the performance of the establishment of a security association through the protocol named Hidra proposed by such an adapted access control model. Consequently, the notable results of the performance evaluation prove the feasibility and adequacy of this access control model for the new smart IoT scenarios.

show abstract

Section: Authorisation Policy Languagementioning

confidence: 99%

Section: Policy Language Codificationmentioning

confidence: 99%

“…To efficiently convey the aforementioned access control policies to the CDSs, Hidra messaging protocol is defined in [5], and briefly described hereinafter. Hidra, depicted in Fig.…”

Section: Hidra Messaging Protocolmentioning

confidence: 99%

Section: Analysis Scenariomentioning

confidence: 99%

Section: Performance Analysismentioning

confidence: 99%

See 3 more Smart Citations

Impact assessment of policy expressiveness of an optimised access control model for smart sensors

Uriarte¹,

Astorga

Jacob

et al. 2019

IET Information Security

Self Cite

View full text Add to dashboard Cite

show abstract

Survey on Access Control Models Feasible in Cyber-Physical Systems

Uriarte¹,

Astorga

Jacob

et al. 2018

Cyber-Physical Systems: Architecture, Security and Application

View full text Add to dashboard Cite

Towards Multi-party Policy-based Access Control in Federations of Cloud and Edge Microservices

Preuveneers

Joosen

2019

2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)

View full text Add to dashboard Cite

The development and deployment of microservices and containers come with a promise of flexibility by embracing heterogeneity and reducing the amount of communication and coordination between service teams. However, when such software ecosystems are developed in large organizations with a high degree of independence, and deployed in the cloud and at the edge, security becomes a non-trivial concern. The challenge that we address in this work is the delegated management of access control decisions to multiple stakeholders in continuously evolving federations of cloud and edge microservices. To ensure that user-centric access control remains sustainable in such complex service delivery models, we present a dynamic granular access control solution on top of different authorization frameworks. By leveraging microservice technologies, our solution is flexible, scalable, and contextual, and can adhere to the security needs of different stakeholders in microservice federations − from DevOps teams to common end-users − with the necessary agility to respond to exceptional security circumstances. Index Terms-authorization; microservices; policy-based access control; edge; federation • Person-to-self : a third party application accessing resources on a user's behalf (cfr. OAuth 2.0). • Person-to-person: pro-actively sharing resource in a selective manner to other persons (cfr. UMA 2.0).

show abstract

Expressive Policy-Based Access Control for Resource-Constrained Devices

Cited by 10 publications

References 45 publications

Impact assessment of policy expressiveness of an optimised access control model for smart sensors

Impact assessment of policy expressiveness of an optimised access control model for smart sensors

Survey on Access Control Models Feasible in Cyber-Physical Systems

Towards Multi-party Policy-based Access Control in Federations of Cloud and Edge Microservices

Contact Info

Product

Resources

About