Fuzzy multi-level security : An experiment on quantified risk-adaptive access control - Extended abstract

被引：141

作者：

Cheng, Pau-Chen ^{[1
]}

Rohatgi, Pankaj ^{[1
]}

Keser, Claudia ^{[1
]}

Karger, Paul A. ^{[1
]}

Wagner, Grant M. ^{[2
]}

Reninger, Angela Schuett ^{[2
]}

机构：

[1] IBM Corp, TJ Watson Res Ctr, Yorktown Hts, NY 10598 USA

[2] US Dept Def, St Petersburg, VA USA

来源：

2007 IEEE SYMPOSIUM ON SECURITY AND PRIVACY, PROCEEDINGS | 2007年

关键词：

D O I：

10.1109/SP.2007.21

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

This paper presents a new model for, or rather a new way of thinking about adaptive, risk-based access control. Our basic premise is that there is always inherent uncertainty and risk in access control decisions that is best addressed in an explicit way. We illustrate this concept by showing how the rationale of the well-known, Bell-Lapadula model based, Multi-Level Security (MLS) access control model could be used to develop a risk-adaptive access control model. This new model is more like a Fuzzy Logic control system [91 than a traditional access control system and hence the name "Fuzzy MLS". The long version of this paper is published as an IBM Research Report [3].

引用

页码：222 / +

页数：2