XSACd—Cross-domain resource sharing & access control for smart environments

Abstract

Computing devices already permeate working and living environments; a trend which affects all aspects of modern everyday lives, and one which is expected to intensify in the coming years. In the residential setting, the enhanced features and services provided by said computing devices constitute what is typically referred to as a "smart home". However, the long-promised improvement in the quality of residential life cannot be realized without overcoming some significant obstacles introduced by these technological advancements. The direct interaction smart devices often have with the physical world, along with the processing, storage and communication of data pertaining to users' lives, i.e. private sensitive in nature, bring security concerns into the limelight. The resource-constraints of the platforms being integrated into a smart home environment, and their heterogeneity in hardware, network and overlaying technologies, only exacerbate the above issues. This paper presents Cross-domain Service Access Control for devices (XSACd), a framework that combines the well-studied fine-grained access control provided by the eXtensible Access Control Markup Language (XACML) with the benefits of Service Oriented Architectures through the use of the Devices Profile for Web Services (DPWS). Based on standardized technologies, it enables seamless interaction and fine-grained policy-based management of the heterogeneous embedded devices that may be found in a smart residential setting, including support for interactions between users and devices residing on different locations and networks. The proposed framework is implemented in full and its performance is evaluated on a test bed featuring relatively resource-constrained smart platforms and embedded devices.

Reactive security for SDN/NFV‐enabled industrial networks leveraging service function chaining

“…The MANO can be used to program the ODL controller, passing the necessary information to the SFC manager, also enabling accurate monitoring of the service functions' resources (eg, triggering the instantiation of additional VMs when a function is overloaded). Moreover, the automated reactiveness of the framework will be enhanced with the integration of SDN security patterns() on the ODL controller via the development of an associated model and the introduction of an adaptive access control mechanism that will enable the policy‐based management of multiple controllers and heterogeneous platforms, even across domains . Finally, the performance of the individual components and the framework as a whole will be evaluated in detail to assess the impact of the proposed mechanisms in the context of the industrial domain and its associated intricacies.…”

Ambient intelligence governance review: from service-oriented to self-service

“… Fysarakis et al (2018) presented XSACd—a smart environment framework for policy-based sharing and device services access. It adopts the eXtensible Access control Markup Language (XACML) to represent policies and the Device Profile for WS (DPWS) to specify resources as services.…”

Private Blockchain-Based Secure Access Control for Smart Home Systems

“…They then discussed feasible means of managing access control in smart homes. Fysarakis et al [20,21] proposed web service access control systems for devices in 2015 and a cross-domain resource sharing and access control framework for smart environments in 2016 based on the application of extensible access control markup language and device profiles for web services. Their schemes facilitate heterogeneous intelligent device interactions and granular access control management.…”