The $$\mathrm {GURA_G}$$ GURA G Administrative Model for User and Group Attribute Assignment

Gupta, Maanak; Sandhu, Ravi

doi:10.1007/978-3-319-46298-1_21

Cited by 34 publications

(33 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The greatest challenge of applying the ABAC model to the IoT is attribute assignment . To improve the flexibility of access controls and the efficiency of attribute assignment, Servos AND Osborn and Gupta and Sandhu proposed Hierarchical Group and Attribute‐Based Access Control models (HGABAC) and an Administration Model for HGABAC (GURAG). Attribute inheritance relations are introduced through user groups and object groups, and an attribute distribution mechanism for users and user groups is provided.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

A topic‐centric access control model for the publish/subscribe paradigm

Xie

Shi

et al. 2019

Concurrency and Computation

View full text Add to dashboard Cite

Summary The publish/subscribe paradigm provides loosely coupled and scalable communication for the Internet of Things (IoT). In this paradigm, access control is an efficient approach to guaranteeing security. However, existing access control methods are not suitable for the publish/subscribe paradigm in the sensing layer of the IoT due to their coarse‐grained controls and lack of self‐configuration. To address these problems, in this paper, we propose a topic‐centric access control model (TCAC) to realize fine‐grained authorization for the sensing layer of the IoT. First, we use topics, a fundamental concept for the publish/subscribe paradigm, as the basic access control unit to dynamically authorize access according to the attributes of devices, users, and topics. Second, an administration model for TCAC is proposed to manage these attributes and configure access policies to effectively implement user‐driven access controls. Finally, a healthcare case is used to demonstrate the security of the proposed TCAC. The results show that our model is dynamic, fine‐grained, and user driven.

show abstract

Section: Related Workmentioning

confidence: 99%

“…The greatest challenge of applying the ABAC model to the IoT is attribute assignment. 12 To improve the flexibility of access controls and the efficiency of attribute assignment, Servos AND Osborn 13 and Gupta and Sandhu 14 proposed…”

Section: Iot Access Control Modelsmentioning

confidence: 99%

A topic‐centric access control model for the publish/subscribe paradigm

Xie

Shi

et al. 2019

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Attributebased authorization policies are used to determine access permissions of users on services and objects. With group hierarchy, senior groups inherit attributes from junior groups [20], and a user assigned to senior groups gets all attributes of group besides its direct attributes. A set of environment attributes is also added to incorporate contextual information (like access time, threat level) in policies.…”

Section: Attributes Based Extensions To Ot-rbacmentioning

confidence: 99%

“…The roles of the user will change based on the user's current attributes as well as current environment attributes. As shown in Figure 6, OT-RBAC model can be configured to achieve dynamic roles assignment to users based on the direct or inherited attributes through group memberships [20]. We can further extend the use of attributes for dynamic permissions assignment to roles based on object tags, environment attribute values and operations.…”

Section: Dynamic Rolesmentioning

confidence: 99%

Object-Tagged RBAC Model for the Hadoop Ecosystem

Gupta

Patwa

Sandhu

2017

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Hadoop ecosystem provides a highly scalable, fault-tolerant and cost-effective platform for storing and analyzing variety of data formats. Apache Ranger and Apache Sentry are two predominant frameworks used to provide authorization capabilities in Hadoop ecosystem. In this paper we present a formal multi-layer access control model (called HeAC) for Hadoop ecosystem, as an academic-style abstraction of Ranger, Sentry and native Apache Hadoop access-control capabilities. We further extend HeAC base model to provide a cohesive object-tagged role-based access control (OT-RBAC) model, consistent with generally accepted academic concepts of RBAC. Besides inheriting advantages of RBAC, OT-RBAC offers a novel method for combining RBAC with attributes (beyond NIST proposed strategies). Additionally, a proposed implementation approach for OT-RBAC in Apache Ranger, is presented. We further outline attribute-based extensions to OT-RBAC.

show abstract

“…Similar, is the case for objects where objects having same properties and characteristics can be grouped into one object group. In addition to directly assigned attribute-value pairs, these groups also have hierar- Figure 1: An Example of User Group Hierarchy Adapted from [30] chy among them which results in attribute inheritance. A group hierarchy is a partial order relation written as g where senior groups acquire all attribute values assigned to the groups junior to them, along with their own directly assigned attribute values.…”

Section: Group Attributes and Hierarchiesmentioning

confidence: 99%

ABAC with Group Attributes and Attribute Hierarchies Utilizing the Policy Machine

Bhatt

Patwa

Sandhu

2017

Proceedings of the 2nd ACM Workshop on Attribute-Based Access Control

Self Cite

View full text Add to dashboard Cite

Attribute-Based Access Control (ABAC) has received significant attention in recent years, although the concept has been around for over two decades now. Many ABAC models, with different variations, have been proposed and formalized. Besides basic ABAC models, there are models designed with additional capabilities such as group attributes, group and attribute hierarchies and so on. Hierarchical relationship among groups and attributes enhances access control flexibility and facilitates attribute management and administration. However, implementation and demonstration of ABAC models in real-world applications is still lacking. In this paper, we present a restricted HGABAC (rHGABAC) model with user and object groups and group hierarchy. We then introduce attribute hierarchies in this model. We also present an authorization architecture for implementing rHGABAC utilizing the NIST Policy Machine (PM). PM allows to define attribute-based access control policies, however, the attributes in PM are different in nature than attributes in typical ABAC models as name-value pairs. We identify a policy configuration mechanism for our proposed model employing PM capabilities, and demonstrate use cases and their configuration and implementation in PM using our authorization architecture.

show abstract

The $$\mathrm {GURA_G}$$ GURA G Administrative Model for User and Group Attribute Assignment

Cited by 34 publications

References 31 publications

A topic‐centric access control model for the publish/subscribe paradigm

A topic‐centric access control model for the publish/subscribe paradigm

Object-Tagged RBAC Model for the Hadoop Ecosystem

ABAC with Group Attributes and Attribute Hierarchies Utilizing the Policy Machine

Contact Info

Product

Resources

About