소셜 네트워크 환경에서 동적 신뢰 중심의접근 제어 모델에 관한 연구
Study on Dynamic Trust-based Access Control in Online Social Network Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 10여 년간 온라인 소셜 네트워크(Online Social Network, OSN)의 사용인구가 폭발적으로 증가하고 있고 우리 생활에서 빼 놓을 수 없는 요소가 되었다. OSN은 개인뿐만 아니라, 그룹, 조직, 그리고 지정학적 위치, 시간적 제약조건까지 극복하는 시공을 초월한 사회적 관계의 확장을 가져오고 있다. 이러한 관계 및 정보공유의 확장은 사생활 노출, 무분별한 정보 공유, 거짓 정보의 전파 등 많은 부작용을 낳기도 한다. 이러한 부작용을 통제하기 위해MAC, DAC, RBAC 등 기존의 접근제어 방법이 사용되었으나, 사용자 간의 접근 허용의 범위가 고정되어, 지속되는 관계 변경에 따른 접근 범위의 제한이 어렵고, 그러므로 변화하는 사용자의 악의적인 행동에 대한 대책이 미흡하다. 본 논문에서는 OSN 환경에 맞는 사용자간 동적 신뢰 중심의 접근제어 모델을 제안하여 사용자의 신뢰도의 변화에 따라 접근 권한을 변화시켜 사용자의 악의적인 행동 변화를 제어토록 하겠다.
Abstract
There has been an explosive increase in the population of OSN(online social network) for 10 years. OSN provides userswith many opportunities to have communication among friends, families and goes so far as to make relationships amongunknown people having similar belief or interest. However, OSN also produced adverse effects such as privacy breaches,leaking uncontrolled information or disseminating false information. Access control models such as MAC, DAC, RBAC areapplied to the OSN to control those problems but those models in OSN are not fit in dynamic OSN environment becauseuser's acts in OSN are unpredictable and static access control imposes burden on users to change access control rules one byone. This paper proposes the dynamic trust-based access control to solve the problems of traditional static access control inOSN.
참고문헌 (26)
- Qian, Xiaolei, "A MAC policy framework for multilevel relational database", IEEE Transactions on Knowledge and Data Engineering, 8(1), pp.1~14 (1996)
- L.Snyder, "Formal models of capability- based protection systems", IEEE Trans. Computers, 30, pp.172~181 (1981)
- R. S. Sandhu, "Role-based access control models", IEEE Trans. Computers, 29, pp.38~47 (1996)
- L. Miu, "A computational model of trust and reputation", 35th Annual Hawaii International Conference on System Sciences, pp.2431~2439 (2002), IEEE
- Félix Gómez Mármol, "Security threats scenarios in trust and reputation models for distributed systems", Computers & Security, 28(7), pp.545~556 (2009), Elsevier
- J. Golbeck, "Computing and Applying Trust in Web-based Social Network", 박사, pp.2005
- SS.D. Kamvar, "The EigenTrust algorithm for reputation management in P2P network", the 12th ACM international WWW conference, pp.640~651 (2003)
- L.Xiong, "Peertrust: Supporting reputation-based trust for peer-to-peer electronic communities", IEEE Transactions on Knowledge and Data Engineering, 16(7), pp.843~857 (2004)
- L.Wen, "Trust model of users' behavior in trustworthy internet", Proceedings of IEEE WASE International Conference on Information Engineering, pp.403~406 (2009)
- Y.Feng, "A reputation-based Dynamic trust Model for Large Scale Distributed Environment", Journal of Computational Information Systems, 9(3), pp.1209~1215 (2013)
- Barbara Carminati, "Enforcing access control in Web-based social networks", ACM Transactions on Information and System Security (TISSEC), 13(1), pp.1~38 (2009)
- B. Carminati, "Rule-based access control for social networks", In On the Move to Meaningful Internet Systems 2006 Workshops, pp.1734~1744 (2006), Springer
- H. Hu, "Multiparty authorization framework for data sharing in online social networks", Data and Applications Security and Privacy XXV, pp.29~43 (2011), Springer Berlin Heidelberg
- Cheng, Yuan, "A user-to-user relationship- based access control model for online social networks", Data and Applications Security and Privacy XXVI, pp.8~24 (2012), Springer Berlin Heidelberg
- Vincent C. Hu, "Guide to Attribute Based Access Control (ABAC) Definition and Considerations (Draft)", NIST Special Publication 800-162, 12~18 (2013)
- Jøsang, Audun, "A survey of trust and reputation systems for online service provision", Decision support systems, 43(2), pp.618~644 (2007)
- Das, Anupam, "Securedtrust: A dynamic trust computation model for secured communication in multiagent systems", Dependable and Secure Computing, IEEE Transactions on, pp.261~274 (2012)
- J. R. Douceur, "The Sybil Attack, Proc. Revised Papers from 1st International Workshop Peer-to-peer Systems(IPTPS 02)", LNCS, 2329, pp.215~260 (2002), Springer
- M. Castro, "Secure Routing for Structured Peer-to-Peer Overlay Networks", ACM SIGOPS Operating Systems Review, (Winter), pp.299~314 (2002)
- Mayer, R. C., "An intergration model of organizational trust", The Academy of Management Review, 20(3), pp.709~734 (1995)
- Gambetta, "Conspiracy among the many: the mafia in legitimate industries, In The economics of organized crime", pp.116~136 (1995), Cambridge University Press