Towards a location-based mandatory access control model

Ray, Indrakshi; Kumar, Mohit

doi:10.1016/j.cose.2005.06.007

Cited by 62 publications

(39 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The most important feature that values this system above DAC is the fact that MAC distinguishes between the subject and object domains and allows the usage of permissions and limitations accordingly. Thus, it is much better in terms of logical comparisons when compared with DAC [72][73][74].…”

Section: Mandatory Access Controlmentioning

confidence: 99%

“…Although the access and usage possibilities are not that good, MAC is easy to understand and use; thus, it has an intermediate level of Ease of Privilege Assignments [72][73][74]. As MAC can do certain distinctions, it has an intermediate level of Syntactic And Semantic Support For Specifying AC Rules.As the assignments are carried out by a central system, no user can transfer their rights to another user, which contributes to a low level of Delegation of Administrative Capabilities.…”

Section: Mandatory Access Controlmentioning

confidence: 99%

See 1 more Smart Citation

Survey on Access Control Mechanisms in Cloud Computing

Karataş

Akbulut

2018

JCSM

View full text Add to dashboard Cite

The benefits that Internet-based applications and services have given to the end user with today's cloud computing technology are very remarkable. The distributed services instantly scaled over the Internet provided by cloud computing can be achieved by using some mechanisms in the background. It is a critical task for end users to control access to resources because lack of control often leads to security risks. In addition, this may cause systems to fail. This paper describes seven different access control mechanisms used in cloud computing platforms for different purposes. Besides, the advantages and disadvantages of various models developed from previous service-based architectures and used for cloud computing are detailed and classified. During the assessments, NIST's metrics were taken as a reference, and in the study, 109 articles from the past decade were examined. We also compared our research with the existing survey papers.

show abstract

Section: Mandatory Access Controlmentioning

confidence: 99%

Section: Mandatory Access Controlmentioning

confidence: 99%

Survey on Access Control Mechanisms in Cloud Computing

Karataş

Akbulut

2018

JCSM

View full text Add to dashboard Cite

show abstract

“…Ray and Kumar describe a formal, Turing-incomplete model that extends a MAC system with location primitives [16]. They describe how the location of a subject and an object can be used to make decisions about granting subjects access to objects, while keeping the locations of subjects and objects private from each other.…”

Section: Related Workmentioning

confidence: 99%

“…Previously developed declarative (and Turing-incomplete) policy-specification languages [13,14,15,16] are limited to location-based access-control policies.…”

Section: Introductionmentioning

confidence: 99%

A location-based policy-specification language for mobile devices

Finnis

Saigal

Iamnitchi

et al. 2012

Pervasive and Mobile Computing

View full text Add to dashboard Cite

The dramatic rise in mobile applications has greatly increased threats to the security and privacy of users. Security mechanisms on mobile devices are currently limited, so users need more expressive ways to ensure that downloaded mobile applications do not act maliciously. Policy-specification languages were created for this purpose; they allow the enforcement of user-defined policies on third-party applications. We have implemented LoPSiL, a location-based policy-specification language for mobile devices. This article describes LoPSiL's design and implementation, several example policies, and experiments that demonstrate LoPSiL's viability for enforcing policies on mobile devices.

show abstract

“…INTRODUCTION Radio localization systems have been integrated into many wireless network solutions. For example, location-based access control (LBAC) determines the users' privileges of accessing critical information by taking the users' physical locations into account [1], [2]. Identity spoofing detection mechanisms use location information to differentiate malicious nodes from legitimate nodes [3].…”

mentioning

confidence: 99%

Analysis on perfect location spoofing attacks using beamforming

Wang

Yang

2013

2013 Proceedings IEEE INFOCOM

View full text Add to dashboard Cite

Abstract-Location spoofing attacks pose serious threats to the location based wireless network mechanisms. Most existing literature focuses on detecting location spoofing attacks or design of robust localization algorithms. However, our study shows that, in many circumstances, perfect location spoofing (PLS) can stay undetected even if robust localization algorithms or detection mechanisms are used. In this paper, we present theoretical analysis on the feasibility of beamforming-based PLS attacks and how it is affected by the anchor deployment. We formulate PLS as a nonlinear feasibility problem based on smart antenna array pattern synthesis. Due to the intractable nature of this feasibility problem, we solve it using semidefinite relaxation (SDR) in conjunction with a heuristic local search algorithm. Simulation results show the effectiveness of our analytical approach and provide insightful advices for defence against PLS attacks.

show abstract

Towards a location-based mandatory access control model

Cited by 62 publications

References 5 publications

Survey on Access Control Mechanisms in Cloud Computing

Survey on Access Control Mechanisms in Cloud Computing

A location-based policy-specification language for mobile devices

Analysis on perfect location spoofing attacks using beamforming

Contact Info

Product

Resources

About