RESPOnSE—A Framework for Enforcing Risk-Aware Security Policies in Constrained Dynamic Environments

Abstract

The enforcement of fine-grained access control policies in constrained dynamic networks can become a challenging task. The inherit constraints present in those networks, which result from the limitations of the edge devices in terms of power, computational capacity and storage, require an effective and efficient access control mechanism to be in place to provide suitable monitoring and control of actions and regulate the access over the resources. In this article, we present RESPOnSE, a framework for the specification and enforcement of security policies within such environments, where the computational burden is transferred to high-tier nodes, while low-tier nodes apply risk-aware policy enforcement. RESPOnSE builds on a combination of two widely used access control models, Attribute-Based Access Control and Role-Based Access Control, exploiting the benefits each one provides. Moreover, the proposed mechanism is founded on a compensatory multicriteria decision-making algorithm, based on the calculation of the Euclidean distance between the run-time values of the attributes present in the security policy and their ideal values, as those are specified within the established policy rules.

A Novel Approach for Systematic Literature Reviews Using Multi-Criteria Decision Analysis

“…Next, the AHP method appears, with 21 occurrences [6, 49-52, 55, 62, 64, 66, 67, 71, 77, 84, 90, 106, 121, 123, 127, 129, 134, 135]. In the third place, the fuzzy method [55, 58, 63, 72, 77, 87, 89-91, 96, 101, 114, 122, 124, 127, 129, 134] and TOPSIS method [50,51,55,59,67,80,84,90,97,103,104,108,118,125,127,129,134], with 17 occurrences each. In addition to those mentioned, the methods of the PROMETHEE family stand out with 9 occurrences [52,77,88,89,93,94,97,115,133].…”

Security, Privacy, and Trustworthiness of Sensor Networks and Internet of Things

“…In the first paper of the special issue [ 1 ], entitled “RESPOnSE—A Framework for Enforcing Risk-Aware Security Policies in Constrained Dynamic Environments”, Michailidou et al address the problem of enforcing fine-grained access control policies in constrained dynamic networks. They propose the RESPOnSE framework, in which the computational burden is transferred to high-tier nodes, while low-tier nodes apply risk-aware policy enforcement.…”

“…In the first paper of the special issue [1], entitled "RESPOnSE-A Framework for Enforcing Risk-Aware Security Policies in Constrained Dynamic Environments", Michailidou et al address the problem of enforcing fine-grained access control policies in constrained dynamic networks.…”