arrow
返回

PolyOrBAC: A security framework for Critical Infrastructures

delete2009-12-01
delete37
delete
OA
AI
A
Anas Abou El Kalam
Y
Yves Deswarte *
A
Amine Baïna
M
Mohamed Kaâniche
DOI:10.1016/j.ijcip.2009.08.005delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Due to physical and logical vulnerabilities, a critical infrastructure (CI) can encounter failures of various degrees of severity, and since there are many interdependencies between CIs, simple failures can have dramatic consequences on the users. In this paper, we mainly focus on malicious threats that might affect the information and communication system that controls the Critical Infrastructure, i.e., the Critical Information Infrastructure (CII). To address the security challenges that are specific of CIIs, we propose a collaborative access control framework called PolyOrBAC. This approach offers each organization taking part in the CII the capacity of collaborating with the other ones, while maintaining a control on its resources and on its internal security policy. The interactions between organizations participating in the CH are implemented through web services (WS), and for each WS a contract is signed between the service-provider organization and the service-user organization. The contract describes the WS functions and parameters, the liability of each party and the security rules controlling the interactions. At runtime, the compliance of all interactions with these security rules is checked. Every deviation from the signed contracts triggers an alarm, the concerned parties are notified and audits can be used as evidence for sanctioning the party responsible for the deviation. Our approach is illustrated by a practical scenario, based on real emergency actions in an electric power grid infrastructure, and a simulation test bed has been implemented to animate this scenario and experiment with its security issues. (C) 2009 Elsevier B.V. All rights reserved.
Keyword:
Critical Infrastructure
Security
Access control policies and models
Collaboration
Interoperability
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

International Journal of Critical Infrastructure Protection 封面图
International Journal of Critical Infrastructure Protection
IF:
5.3
论文数:
595
被引数:
1.3K

机构

C
centre national de la recherche scientifique (cnrs)
学者数:
24.5W
论文数: 18.2W
被引数: 279
U
universite de toulouse
学者数:
3.5W
论文数: 2.7W
被引数: 37
引用论文

引用论文

Complexity in the use of 5G technology in China: An exploration using fsQCA approach
err2023-08-01
err0
PREAI
errSayed Kifayat Shah; Zhongjun Tang; Jingbo Yuan; József Popp; Ángel Acevedo-Duque
err分享
err收藏
err分享
err收藏
学者 查看更多内容