Proximity-based access control for context-sensitive information provision in SOA-based systems

Gowri Rajappan; Xiaofei Wang; Robert Grant; Matthew Paulini

doi:10.1117/12.2049559

17 June 2014 Proximity-based access control for context-sensitive information provision in SOA-based systems

Gowri Rajappan, Xiaofei Wang, Robert Grant, Matthew Paulini

Proceedings Volume 9096, Open Architecture/Open Business Model Net-Centric Systems and Defense Transformation 2014; 909605 (2014) https://doi.org/10.1117/12.2049559
Event: SPIE Defense + Security, 2014, Baltimore, MD, United States

Abstract

Service Oriented Architecture (SOA) has enabled open-architecture integration of applications within an enterprise. For net-centric Command and Control (C2), this elucidates information sharing between applications and users, a critical requirement for mission success. The Information Technology (IT) access control schemes, which arbitrate who gets access to what information, do not yet have the contextual knowledge to dynamically allow this information sharing to happen dynamically. The access control might prevent legitimate users from accessing information relevant to the current mission context, since this context may be very different from the context for which the access privileges were configured. We evaluate a pair of data relevance measures – proximity and risk – and use these as the basis of dynamic access control. Proximity is a measure of the strength of connection between the user and the resource. However, proximity is not sufficient, since some data might have a negative impact, if leaked, which far outweighs importance to the subject’s mission. For this, we use a risk measure to quantify the downside of data compromise. Given these contextual measures of proximity and risk, we investigate extending Attribute-Based Access Control (ABAC), which is used by the Department of Defense, and Role-Based Access Control (RBAC), which is widely used in the civilian market, so that these standards-based access control models are given contextual knowledge to enable dynamic information sharing. Furthermore, we consider the use of such a contextual access control scheme in a SOA-based environment, in particular for net-centric C2.

Citation Download Citation

Gowri Rajappan, Xiaofei Wang, Robert Grant, and Matthew Paulini "Proximity-based access control for context-sensitive information provision in SOA-based systems", Proc. SPIE 9096, Open Architecture/Open Business Model Net-Centric Systems and Defense Transformation 2014, 909605 (17 June 2014); https://doi.org/10.1117/12.2049559

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available

Members: $17.00

Non-members: $21.00 ADD TO CART

PROCEEDINGS
7 PAGES

DOWNLOAD PAPER SAVE TO MY LIBRARY

GET CITATION

RIGHTS & PERMISSIONS

Get copyright permission Get copyright permission on Copyright Marketplace

KEYWORDS

Control systems

Information technology

Information security

Computer security

Plasma display panels

Systems modeling

Defense and security

Show All Keywords

Keywords/Phrases

Search In:

Publication Years