Enforcing Integrity in Multimedia Surveillance

Journal on Data Semantics II

2005

Self Cite

Abstract. Continuous audio-visual surveillance is utilized to ensure the physical safety of critical infrastructures such as airports, nuclear power plants and national laboratories. In order to do so, traditional surveillance systems place cameras, microphones and other sensory input devices in appropriate locations [Sch99]. These facilities are arranged in a hierarchy of physical zones reflecting the secrecy of the guarded information. Guards in these facilities carry clearances that permit them only in appropriate zones of the hierarchy, and monitor the facilities by using devices such as hand-held displays that send streaming media of the guarded zones possibly with some instructions. The main security constraint applicable to this model is that any guard can see streams emanating from locations with secrecy levels equal to or lower than theirs, but not higher. We show how to model these surveillance requirements using the synchronized multimedia integration language (SMIL) [Aya01] with appropriate security enhancements. Our solution consists of imposing a multi-level security model on SMIL documents to specify surveillance requirements. Our access control model ensures that a multimedia stream can only be displayed on a device if the security clearance of the display device dominates the security clearance of the monitored zone. Additionally, we pre-process a set of cover stories that can be released during emergency situations that allow using the services of guards with lower clearances without disclosing data with higher sensitive levels. For this, we create a view for each level, and show that these views are semantically coherent and comply with specified security polices.

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Enforcing Semantics-Aware Security in Multimedia Surveillance

Kodali

Journal on Data Semantics II

2005

Self Cite

“…This paper is an extended version of [9], in which multimedia surveillance is described with limited operational semantics. Kodali et al propose models for multimedia access control for different security paradigms.…”

Section: Related Workmentioning

confidence: 99%

Creating non-decomposable stream bundles in multimedia web services using uSMIL

Kodali

Proceedings of the 2004 Workshop on Secure Web Service - SWS '04

2004

Self Cite

Technical advances in networks, operating systems and web based services are enabling new web-based services such as audiovisual surveillance, monitoring and recording of unfolding real world scenes. Leaving room to alter the chronology of such real-world recordings would facilitate the ability to fabricate audiovisual evidence, thereby seriously eroding emerging public trust on these up and coming services. One way of avoiding this problem is to be able to specify which chronology building composition operators -otherwise known as multimedia synchronization constructs -such as before, after, simultaneously etc., have more rigid failure semantics. Existing W3C standard for multimedia services, the synchronized multimedia integration language (SMIL) does not provide them. In order to address this deficiency, we propose uSMIL -an extension of SMIL that allows the creation of non-decomposable stream bundles with an all or nothing playout semantics. Here we present a report on our work in progress that defines a formal operational semantics for uSMIL and show some of its algebraic properties.

“…The process of retrieval without losing the sense of continuity and synchronization needs better techniques and algorithms which all of the above models do not completely address. Kodali et al [KW02,KWJ03,KFW03] propose three different models for enforcing different security paradigms. A release control for SMIL formatted multimedia objects for pay-per-view movies on the Internet that enforces DAC is described in [KW02].…”

Section: Related Workmentioning

confidence: 99%

“…The paper describes a mechanism to enforce RBAC policies. [KFW03] describes an MLS application for secure surveillance of physical facilities where guards with different security classification in charge of the physical security of the building are provided live feeds matching their level in the MLS subject hierarchy. SMIL [Aya01] is an extension to XML developed by W3C to author multimedia presentations with audio, video, text and images to be integrated and synchronized.…”

Section: Related Workmentioning

confidence: 99%

Multimedia Access Control Using RDF Metadata

Kodali¹,

On the Move to Meaningful Internet Systems 2003: OTM 2003 Workshops

2003

Self Cite

Abstract. The Synchronized Multimedia Integration Language (SMIL) [Aya01] is an W3C[W3C03] specification for authoring multimedia documents. Although SMIL has XML like syntactic constructs, unlike XML, SMIL compositions have an intended interpretation stemming from intuitive notions of playing out many media streams relative to each other. Thus, more than one SMIL syntactic expression can represent a multimedia composition with the same intended semantics. In this work we propose a normal form for SMIL objects that allows to specify security policies that are independent of representational syntax. We also show how to represent access control and QoS polices applicable to multimedia compositions by decorating SMIL compositions with RDF [KC03] statements. Our RDF statements are based on an RDF structure tailored to represent known security paradigms such as Discretionary, Mandatory, and Role-Based Access Control. Once the security paradigm is chosen and the SMIL document is decorated with security and QoS specifications, we show how to create secure views of the SMIL document. We call these views secure normal forms. Next, we show how a secure multimedia server can use these views to provide secure runtime environment.