A Context-Aware Security Architecture for Emerging Applications

  • Authors:
  • Michael J. Covington;Prahlad Fogla;Zhiyuan Zhan;Mustaque Ahamad

  • Affiliations:
  • -;-;-;-

  • Venue:
  • ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

We describe an approach to building security servicesfor context-aware environments. Specifically, we focus onthe design of security services that incorporate the use ofsecurity-relevant "context" to provide flexible access controland policy enforcement. We previously presented a generalizedaccess control model that makes significant use ofcontextual information in policy definition. This documentprovides a concrete realization of such a model by presentinga system-level service architecture, as well as early implementationexperience with the framework. Through ourcontext-aware security services, our system architecture offersenhanced authentication services, more flexible accesscontrol and a security subsystem that can adapt itself basedon current conditions in the environment. We discuss ourarchitecture and implementation and show how it can beused to secure several sample applications.