Unified enterprise modelling language-based interoperability for collaborative access control framework in critical infrastructures

被引：0

作者：

Baina A. ^{[1
]}

Benali K. ^{[2
]}

Bellafkih M. ^{[1
]}

Aali N.A. ^{[1
]}

机构：

[1] Laboratoire de Systèmes de Télécoms, Réseaux et Services (STRS), Institut National des Postes et Télécommunications (INPT), 2 Avenue Allal El Fassi, Rabat

[2] CNRS, Inria, LORIA, Université de Lorraine, Nancy

来源：

International Journal of Networking and Virtual Organisations | 2020年 / 22卷 / 01期

关键词：

Access control policies and models; CII; Collaboration; Collaborative access control; Critical information infrastructure; Critical infrastructure; Electrical grid; Interoperability; Security; UEML; Unified enterprise modelling language; Virtual organisations;

D O I：

10.1504/IJNVO.2020.104979

中图分类号：

学科分类号：

摘要：

Due to physical and logical vulnerabilities, a critical infrastructure (CI) can encounter failures of various degrees of severity, and since there are many interdependencies between CIs, simple failures can have dramatic consequences on the whole infrastructure. In this paper, we mainly focus on malicious threats that might affect the communication and information systems (the critical information infrastructure, or CII) dedicated to critical infrastructures. We define a new collaborative access control framework called PolyOrBAC, to address the security problems that are specific of CIIs. This approach offers each organisation taking part in the CII the capacity of collaborating with the other ones, while maintaining a control on its resources and on its internal security policy. The approach is demonstrated on a practical scenario, based on real emergency actions in an electric power grid infrastructure. © 2020 Inderscience Enterprises Ltd.

引用

页码：75 / 100

页数：25