Lico: A Lightweight Access Control Model for Inter-Networking Linkages

Li, S; Ren, W; Zhu, T; Choo, KKR

Lico: A Lightweight Access Control Model for Inter-Networking Linkages

Li, S Ren, W Zhu, T

Choo, KKR

Permalink

Publication Type:: Journal Article
Citation:: IEEE Access, 2018, 6 pp. 51748 - 51755
Issue Date:: 2018-09-14

Open Access

Copyright Clearance Process

Recently Added
In Progress
Open Access

This item is open access.

Adobe PDF

Download Published VersionAdobe PDF (3.46 MB)

View on publisher's site

View statistics

Full metadata record

Field	Value	Language
dc.contributor.author	Li, S	en_US
dc.contributor.author	Ren, W	en_US
dc.contributor.author	Zhu, T https://orcid.org/0000-0003-3411-7947	en_US
dc.contributor.author	Choo, KKR	en_US
dc.date.issued	2018-09-14	en_US
dc.identifier.citation	IEEE Access, 2018, 6 pp. 51748 - 51755	en_US
dc.identifier.uri	http://hdl.handle.net/10453/132120
dc.description.abstract	© 2013 IEEE. Processes in operating systems are assigned different privileges to access different resources. A process may invoke other processes whose privileges are different; thus, its privileges are expanded (or escalated) due to such improper 'inheritance.' Inter-networking can also occur between processes, either transitively or iteratively. This complicates the monitoring of inappropriate privilege assignment/escalation, which can result in information leakage. Such information leakage occurs due to privilege transitivity and inheritance and can be defined as a general access control problem for inter-networking linkages. This is also a topic that is generally less studied in existing access control models. Specifically, in this paper, we propose a lightweight directed graph-based model, LiCo, which is designed to facilitate the authorization of privileges among inter-networking processes. To the best of our knowledge, this is the first general access control model for inter-invoking processes and general inter-networking linkages.	en_US
dc.relation.ispartof	IEEE Access	en_US
dc.relation.isbasedon	10.1109/ACCESS.2018.2870148	en_US
dc.title	Lico: A Lightweight Access Control Model for Inter-Networking Linkages	en_US
dc.type	Journal Article
utslib.citation.volume	6	en_US
utslib.for	0805 Distributed Computing	en_US
utslib.for	08 Information and Computing Sciences	en_US
utslib.for	09 Engineering	en_US
utslib.for	10 Technology	en_US
pubs.embargo.period	Not known	en_US
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
utslib.copyright.status	open_access
pubs.publication-status	Published	en_US
pubs.volume	6	en_US

Abstract:

© 2013 IEEE. Processes in operating systems are assigned different privileges to access different resources. A process may invoke other processes whose privileges are different; thus, its privileges are expanded (or escalated) due to such improper 'inheritance.' Inter-networking can also occur between processes, either transitively or iteratively. This complicates the monitoring of inappropriate privilege assignment/escalation, which can result in information leakage. Such information leakage occurs due to privilege transitivity and inheritance and can be defined as a general access control problem for inter-networking linkages. This is also a topic that is generally less studied in existing access control models. Specifically, in this paper, we propose a lightweight directed graph-based model, LiCo, which is designed to facilitate the authorization of privileges among inter-networking processes. To the best of our knowledge, this is the first general access control model for inter-invoking processes and general inter-networking linkages.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/132120