Capturing Semantics for Information Security and Privacy Assurance

Authors:
Mohammad M. Chowdhury;Javier Chamizo;Josef Noll;Juan Miguel Gómez
Affiliations:
UniK-University Graduate Center, Kjeller, Norway N-2027;Escuela Politécnica Superior, Universidad Carlos III de Madrid, Madrid, Spain;UniK-University Graduate Center, Kjeller, Norway N-2027;Escuela Politécnica Superior, Universidad Carlos III de Madrid, Madrid, Spain
Venue:
UIC '08 Proceedings of the 5th international conference on Ubiquitous Intelligence and Computing
Year:
2008

Citing 8
Cited 0

Role-Based Access Control Models

Computer
Ontologies: a silver bullet for knowledge management and electronic commerce

Ontologies: a silver bullet for knowledge management and electronic commerce
Privacy and security: an ethical analysis

ACM SIGCAS Computers and Society
Agents, trust, and information access on the semantic web

ACM SIGMOD Record
Analyzing web access control policies

Proceedings of the 16th international conference on World Wide Web
Formal Verification of Business Workflows and Role Based Access Control Systems

SECUREWARE '07 Proceedings of the The International Conference on Emerging Security Information, Systems, and Technologies
A semantic context-aware access control framework for secure collaborations in pervasive computing environments

ISWC'06 Proceedings of the 5th international conference on The Semantic Web
D-FOAF: distributed identity management with access rights delegation

ASWC'06 Proceedings of the First Asian conference on The Semantic Web

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security and privacy assurance is indispensable for ubiquitous access to information and resources. This paper focuses on the security and privacy provisions in a restricted organizational environment through access control mechanism. It includes the representation of the semantics of an organization and its access control mechanism exploiting the Web Ontology Language. The system controls access to the resources of an organization through differential access privileges. These are formulated based on the roles of the individuals, and the projects and departments they belong to. Instead of explicit definitions, some additional facts of the mechanism are inferred by executing semantic rules using the Jess rule engine over the designed ontology. These information are then passed back to the ontology to enrich it. The ontology is designed to cope with the organization restructuring with minimal efforts.