Data centered and Usage-based Security service - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Data centered and Usage-based Security service

Jingya Yuan
  • Fonction : Auteur
  • PersonId : 736854
  • IdHAL : jingya-yuan
Frédérique Biennier
Aïcha-Nabila Benharkat

Résumé

Protecting Information Systems (IS) relies traditionally on security risk anal-ysis methods. Designed for well-perimetrised environments, these methods rely on a systematic identification of threats and vulnarabilities to identify efficient control-centered protection countermeasures. Unfortunately, this does not fit security challenges carried out by the opened and agile organiza-tions provided by the Social, Mobile, big data Analytics, Cloud and Internet of Things (SMACIT) environment. Due to their inherently collaborative and distributed organization, such multi-tenancy systems require the integration of contextual vulnerabilities, depending on the a priori unknown way of us-ing, storing and exchanging data in opened cloud environment. Moreover, as data can be associated to multiple copies, different protection requirements can be set for each of these copies, which may lead the initial data owner lose control on the data protection. This involves (1) turning the traditional control-centered security vision to a dynamic data-centered protection and even (2) considering that the way a data is used can be a potential threat that may corrupt data protection efficiency. To fit these challenges, we propose a Data-centric Usage-based Protection service (DUP). This service is based on an information system meta-model, used to identify formally data assets and store the processes using copies of these assets. To define a usage-entered protection, we extend the Usage Based Access Control model, which is mostly focused on managing CRUD operations, to more complex operation fitting the SMACIT context. These usage rules are used to generate smart contracts, storing usage consents and managing usage control for cloud ser-vices.
Fichier non déposé

Dates et versions

hal-03200054 , version 1 (16-04-2021)

Identifiants

Citer

Jingya Yuan, Frédérique Biennier, Aïcha-Nabila Benharkat. Data centered and Usage-based Security service. 2nd Workshop on Smart Data Integration and Processing on Service Based Environments, C. Ghedira, G. Vargas Solar, N. Bennani, Dec 2020, Dubai, United Arab Emirates. ⟨10.1007/978-3-030-76352-7_42⟩. ⟨hal-03200054⟩
46 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More