Ontology Based Log Content Extraction Engine for a posteriori Security Control - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Studies in Health Technology and Informatics Année : 2012

Ontology Based Log Content Extraction Engine for a posteriori Security Control

Résumé

In a posteriori access control, users are accountable for actions they performed and must provide evidence, when required by some legal authorities for instance, to prove that these actions were legitimate. Generally, log files contain the needed data to achieve this goal. This logged data can be recorded in several formats; we consider here IHE-ATNA (Integrating the healthcare enterprise-Audit Trail and Node Authentication) as log format. The difficulty lies in extracting useful information regardless of the log format. A posteriori access control frameworks often include a log filtering engine that provides this extraction function. In this paper we define and enforce this function by building an IHE-ATNA based ontology model, which we query using SPARQL, and show how the a posteriori security controls are made effective and easier based on this function.
Fichier principal
Vignette du fichier
AZKIA2012.pdf (199.69 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-00868711 , version 1 (07-07-2022)

Licence

Paternité

Identifiants

  • HAL Id : hal-00868711 , version 1

Citer

Hanieh Azkia, Nora Cuppens-Boulahia, Frédéric Cuppens, Gouenou Coatrieux. Ontology Based Log Content Extraction Engine for a posteriori Security Control. Studies in Health Technology and Informatics, 2012, 180, pp.746-750. ⟨hal-00868711⟩
85 Consultations
10 Téléchargements

Partager

Gmail Facebook X LinkedIn More