내부자의 불법적 정보 유출 차단을 위한 접근통제 모델 설계
An Architecture of Access Control Model for Preventing Illegal Information Leakage by Insider
1
조회
0
다운로드
7
인용
0
참고문헌
키워드
초록
In the paper, we proposed an IM-ACM(Insider Misuse-Access Control Model) for preventing illegal information leakage by insider who exploits his legal rights in the ubiquitous computing environment. The IM-ACM can monitor whether insider uses data rightly using misuse monitor add to CA-TRBAC(Context Aware-Task Role Based Access Control) which permits access authorization according to user role, context role, task and entity's security attributes. It is difficult to prevent information leakage by insider because of access to legal rights, a wealth of knowledge about the system. The IM-ACM can prevent the information flow between objects which have the different security levels using context role and security attributes and prevent an insider misuse by misuse monitor which comparing an insider actual processing behavior to an insider possible work process pattern drawing on the current defined profile of insider's process.
Abstract
In the paper, we proposed an IM-ACM(Insider Misuse-Access Control Model) for preventing illegal information leakage by insider who exploits his legal rights in the ubiquitous computing environment. The IM-ACM can monitor whether insider uses data rightly using misuse monitor add to CA-TRBAC(Context Aware-Task Role Based Access Control) which permits access authorization according to user role, context role, task and entity's security attributes. It is difficult to prevent information leakage by insider because of access to legal rights, a wealth of knowledge about the system. The IM-ACM can prevent the information flow between objects which have the different security levels using context role and security attributes and prevent an insider misuse by misuse monitor which comparing an insider actual processing behavior to an insider possible work process pattern drawing on the current defined profile of insider's process.
참고문헌 (17)
- "2010 Cyber Security Watch Survey", CSO magazine, U.S. Secret Service and Carnegie Mellon University&Deloitte, ~ (2009)
- Brian M.Bowen, "Designing Host and Network Sensors to Mitigate the Insider Threat", IEEE The Journal of Security & Privacy, 7(6), pp.22~29 (2009)
- Felicia A.Duran, "Building a System for Insider Security", IEEE The Journal of Security & Privacy, 7(6), pp.30~38 (2009)
- Salvatore J.Stolfo, "Insider Attack and Cyber Security Beyond the Hacker" (2008), Springer
- Frank Stajano, "Security for ubiquitous computing" (2002), Wiley
- David F.Ferraiolo, "Role-Based Access Control" (2003), Artech House
- Antonio Corradi, "Context-based Access Control for Ubiquitous Service Provisioning", Proceedings of the COMPSAC'04, pp.444~451 (2004)
- Weili Han, "Context-sensitive Access control Model and Implementation", Proceedings of The CIT'05, pp.757~763 (2005)
- Dawn Cappelli, "Common Sense Guide to Prevention and Detection of insider Threats", SEI Carnegie Mellon, ~ (2009)
- "Role Based Access Control", American National Standards Institute, ~ (2004)
- Seon-Ho Park, "Context-Role Based Access Control for Context-Aware Application", High Performance Computing and Communications 2006, pp.572~580 (2006), LNCS
- 엄정호, "유비쿼터스 전장 컴퓨팅 환경에서 상황 인식과 직무 역할 기반의 접근제어에 관한 연구", 박사, pp.2008
- Joon S.Park, "Composite Role-Based Monitoring For Countering Insider Threats", The 2nd Symposium on Intelligence and Security Informatics 2004, pp.201~213 (2004)
- 엄정호, "NCW 컴퓨팅 환경에서 CA-TRBAC의 접근제어 효율성에 관한 연구", 정보*보안논문지, 9(1), pp.45~53 (2009), 한국사이버테러정보전학회
- Robert H. Anderson, "Research and Development Initiatives Focused on Preventing, Detecting, and Responding to Insider Misuse of Critical Defense Information Systems", RAND, ~ (1999)
- 임희섭, "군사환경에 과업-역할기반 접근제어 모델을 적용하기 위한 제약조건", 석사, pp.2002
- Sejong Oh, "Task-Role-Based Access Control Model", Information Systems, 28(6), pp.533~562 (2003)