A group-centric model for collaboration with expedient insiders in multilevel systems

Bijon, Khalid Zaman; Sandhu, Ravi; Krishnan, Ram

doi:10.1109/cts.2012.6261086

Cited by 4 publications

(7 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this section we review the group-centric model for collaboration with expedient insiders [4], which we call GEI. In GEI, an organization may establish any number of distinct collaboration groups, all of which use the identical but separate lattice structure as the organization.…”

Section: Group-centric Collaboration With Expedient Insiders (Gei)mentioning

confidence: 99%

“…The complete set of elements of each state γ ∈ Γ of GEI scheme is given in Table I of [1]. Ψ State transition rules of GEI scheme are the operations of administrative and operational models given in [4]. Column 1 of Table II and III given in [1] specifies those operations.…”

Section: Operational Modelmentioning

confidence: 99%

“…Recently a model has been proposed [4] for such collaborations between a single organization and outside consultants. This model motivates the Group-Centric concept [7] as an appropriate means for this purpose.…”

Section: Introductionmentioning

confidence: 99%

“…Gradually the organization populates the group with selected objects, true insiders and expedient insiders. For ease of reference we call the model of [4] as the GEI model, for groupcentric collaboration with expedient insiders. In GEI, separate piece of lattices are maintained for the organization and and for each collaboration groups.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

A Lattice Interpretation of Group-Centric Collaboration with Expedient Insiders

Bijon¹,

Ahmed²,

Sandhu³

et al. 2012

Proceedings of the 8th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing

Self Cite

View full text Add to dashboard Cite

For various reasons organizations need to collaborate with external consultants, e.g. domain specialists, on specific projects. Many security-oriented organizations deploy multi-level systems which enforce one directional information flow in a lattice of security labels. However, traditional lattice constructions are not suitable for accommodating external consultants, since such consultants are not "true insiders" but rather "expedient insiders" who should receive much more limited privileges than employees. An authorization model for group-centric collaboration with expedient insiders (GEI) has been recently proposed, wherein organizations create groups and replicate the organizational lattice with selected content for such collaborations [4]. Motivated by GEI, in this paper, we formulate a novel lattice construction wherein a new collaboration category is introduced for each new collaboration group, in a manner significantly different from the usual process of defining new security categories in a lattice. In particular, a collaboration category brings together only the required objects and users. We develop a formal model for lattices with collaborative compartments (LCC) comprising administrative and operational parts covering the life-cycle of such collaborations. We formally prove the equivalence of LCC and GEI, thereby precisely characterizing the information flow and security properties of GEI which heretofore had only been informally considered. This equivalence shows that GEI can be realized via LBAC with minimal operational disruptions.

show abstract

Section: Group-centric Collaboration With Expedient Insiders (Gei)mentioning

confidence: 99%

Section: Operational Modelmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

A Lattice Interpretation of Group-Centric Collaboration with Expedient Insiders

Bijon¹,

Ahmed²,

Sandhu³

et al. 2012

Proceedings of the 8th IEEE International Conference on Collaborative Computing: Networking, Applications and Worksharing

Self Cite

View full text Add to dashboard Cite

show abstract

“…Others focus on a specific aspect of collaboration such as cybersecurity or implementation of specific tools. Bijon, et al [5] investigated intellectual property issues when groups which are a part of a multilevel system collaborate with outsider consultants on specific projects. Takahashi, et al [6] developed a cybersecurity operation activity model, and Andert Jr and Morgan [7] explored the implementation of specific tools aimed at collaborative virtual prototyping.…”

Section: Introductionmentioning

confidence: 99%

Improving the creation and management of collaborative networks within the European maritime sector

Vuletic

Whitfield

Wang

et al. 2017

Journal of Industrial Information Integration

View full text Add to dashboard Cite

This version is available at https://strathprints.strath.ac.uk/60911/ Strathprints is designed to allow users to access the research output of the University of Strathclyde. Unless otherwise explicitly stated on the manuscript, Copyright © and Moral Rights for the papers on this site are retained by the individual authors and/or other copyright owners. Please check the manuscript for details of any other licences that may have been applied. You may not engage in further distribution of the material for any profitmaking activities or any commercial gain. You may freely distribute both the url (https://strathprints.strath.ac.uk/) and the content of this paper for research or private study, educational, or not-for-profit purposes without prior permission or charge.Any correspondence concerning this service should be sent to the Strathprints administrator: strathprints@strath.ac.ukThe Strathprints institutional repository (https://strathprints.strath.ac.uk) is a digital archive of University of Strathclyde research outputs. It has been developed to disseminate open access research outputs, expose data about those outputs, and enable the management and persistent access to Strathclyde's intellectual output. AbstractThe first ever model of operational collaboration for the European maritime industry is presented, built upon the established current state-of-the art in engineering collaboration modelling and addressing key industry requirements. The requirements for operational collaboration practices in the European maritime industry were identified using three approaches: an industrial survey of 69 associations, companies and institutions in the maritime sector; an analysis of prototype collaboration tools; and through an analysis of literature. These requirements were thematically grouped and consolidated where they overlapped, and then translated into model elements and interactions between them. A model that accurately abstracts service and technology collaboration provision between companies in a variety of collaboration modes was built, and validated against a ACCEPTED MANUSCRIPT A C C E P T E D M A N U S C R I P T 2 series of steps that an organisation would need to undertake, to develop a particular mode of collaboration to supports their needs. It was tested in three industrial case studies, providing encouraging feedback demonstrating successful implementation. It provides the opportunity for reassessment of the employed processes and activities, and provides a structure for improving collaborative engineering design. Whilst the research was based in the European maritime industry, the model has wider applicability within the collaborative design of complicated engineering artefacts such as automotive or aerospace.

show abstract