检索结果-南通市图书馆

Creeper:a tool for detecting permission creep in file system access controls

Cybersecurity 2019年第1期2卷 239-252页

作者： Simon Parkinson Saad Khan James Bray Daiyaan Shreef Department of Computer Science School of Computing and EngineeringUniversity of HuddersfieldQueensgateHD13DHHuddersfieldUK

Access control mechanisms are widely used in multi-user IT systems where it is necessary to restrict access to computing *** is certainly true of file systems whereby information needs to be protected against unintended *** permissions often evolve over time,and changes are often made in an ad hoc manner and do not follow any rigorous *** is largely due to the fact that the structure of the implemented permissions are often determined by experts during initial system configuration and documentation is rarely ***,permissions are often not audited due to the volume of information,the requirement of expert knowledge,and the time required to perform manual *** paper presents a novel,unsupervised technique whereby a statistical analysis technique is developed and applied to detect instances of permission *** system(herein refereed to as Creeper)has initially been developed for Microsoft systems;however,it is easily extensible and can be applied to other access control *** analysis has demonstrated good performance and applicability on synthetic file system permissions with an average accuracy of 96%.Empirical analysis is subsequently performed on five real-world systems where an average accuracy of 98%is established.

关键词： Permission creep Access control Auditing χ^2 statistics

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：