Spatio temporal emergency role based access control (STEM-RBAC): A time and location aware role based access control model with a break the glass mechanism

Georgakakis, Emmanouil; Nikolidakis, Stefanos A.; Vergados, Dimitrios D.; Douligeris, Christos

doi:10.1109/iscc.2011.5983932

Cited by 12 publications

(10 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…RBAC allows users to access information related to the specific roles that they have been assigned. In real-life settings, RBAC may not be appropriate because of conflicts that may occur between roles [2][3][4][5]. The characteristics, merits, and demerits of access control techniques are set forth in Table 1.…”

Section: Related Workmentioning

confidence: 99%

“…General wireless security threats that may occur in business and social life using mobile devices include rogue evil twin APs, ad hoc networks, RF jamming, deauthentication, MAC spoofing, WEP key cracking, and sniffing [1,2]. Table 2 classifies wireless security threats with respect to confidentiality, integrity, and availability (three elements of security) that may occur in business and social life using mobile devices.…”

Section: Threats In Wireless Securitymentioning

confidence: 99%

“…These involve illegal changes and deletions in data and forged data insertion during wireless communication transmission between mobile To reduce false-positive ratesand system loads in business and social settings where diverse mobile devices, roles, and environments exist, the mobile-intrusion prevention system (m-IPS) is needed toensure better access control based on temporal, spatial, and contextual roles for efficiency and security. The access control should be able to respond to diverse exceptions that may occur in offices [2,5,6].…”

Section: Requirements For Wireless Securitymentioning

confidence: 99%

“…Another approach is to define permissions that should consider the static and dynamic behavior of context constraints. Based on this, the adoption of the existing well-known access control models and technologies is sensible as it provides a means to extend from traditional to context-based access control policies and facilitates obligation policies enforcement [2,3,12].…”

Section: Contextual Role-based Access Controlmentioning

confidence: 99%

“…Furthermore, business/work environments are too diversified to enable accurate detection and prevention of attacks. In essence, the same rules cannot be applied to all mobile business devices because of considerations of time, space, and individual roles [1,2]. In this wireless IPS study, trends and related security threats and requirements in mobile business work environments are discussed.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

An Efficient and Securem-IPS Scheme of Mobile Devices for Human-Centric Computing

Jeong

Lee

et al. 2014

Journal of Applied Mathematics

View full text Add to dashboard Cite

Recent rapid developments in wireless and mobile IT technologies have led to their application in many real-life areas, such as disasters, home networks, mobile social networks, medical services, industry, schools, and the military. Business/work environments have become wire/wireless, integrated with wireless networks. Although the increase in the use of mobile devices that can use wireless networks increases work efficiency and provides greater convenience, wireless access to networks represents a security threat. Currently, wireless intrusion prevention systems (IPSs) are used to prevent wireless security threats. However, these are not an ideal security measure for businesses that utilize mobile devices because they do not take account of temporal-spatial and role information factors. Therefore, in this paper, an efficient and secure mobile-IPS (m-IPS) is proposed for businesses utilizing mobile devices in mobile environments for human-centric computing. Them-IPS system incorporates temporal-spatial awareness in human-centric computing with various mobile devices and checks users’ temporal spatial information, profiles, and role information to provide precise access control. And it also can extend application ofm-IPS to the Internet of things (IoT), which is one of the important advanced technologies for supporting human-centric computing environment completely, for real ubiquitous field with mobile devices.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Threats In Wireless Securitymentioning

confidence: 99%