Poster: using quantified risk and benefit to strengthen the security of information sharing

Authors:
Weili Han;Chenguang Shen;Yuliang Yin;Yun Gu;Chen Chen
Affiliations:
Fudan University, Shanghai, China;Fudan University, Shanghai, China;Fudan University, Shanghai, China;Fudan University, Shanghai, China;Fudan University, Shanghai, China
Venue:
Proceedings of the 18th ACM conference on Computer and communications security
Year:
2011

Citing 4
Cited 0

Toward Information Sharing: Benefit And Risk Access Control (BARAC)

POLICY '06 Proceedings of the Seventh IEEE International Workshop on Policies for Distributed Systems and Networks
Fuzzy Multi-Level Security: An Experiment on Quantified Risk-Adaptive Access Control

SP '07 Proceedings of the 2007 IEEE Symposium on Security and Privacy
Apply Measurable Risk to Strengthen Security of a Role-Based Delegation Supporting Workflow System

POLICY '09 Proceedings of the 2009 IEEE International Symposium on Policies for Distributed Systems and Networks
A metadata calculus for secure information sharing

Proceedings of the 16th ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Risk and benefit are two implicit key factors to determine accesses in secure information sharing. Recent researches have shown that they can be explicitly quantified and used to improve the flexibility in information systems. This paper introduces the motivation and a technical design of Quantified riSk and Benefit adaptive Access Control (QSBAC) to strengthen the security of information sharing. The paper also introduces the key issues to design policies in QSBAC.