arrow
返回

Using Conditional Random Fields to Optimize a Self-Adaptive Bell-LaPadula Model in Control Systems

delete2021-07-01
delete6
PRE
AI
L
Li Yang
王津 封面图
王津 (Jin Wang)
Z
Zhuo Tang
N
Naixue Xiong *
DOI:10.1109/TSMC.2019.2937551delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Once defined, the access control policies and regulations would never be changed in a running and state transition process. However, it will give attackers the possibility of discovering vulnerabilities in the system, and the control systems lack the ability of dynamic perception of security state and risk, causing the systems to be exposed to risks. In this article, a dynamic Bell-LaPadula (BLP) model is proposed. The conditional random field (CRF) is introduced into the BLP model to optimize the rules. First, the model formalizes the security attributes, states of system, transition rules, and constraint models on the basis of the state transition of CRFs. After the historical system access logs are processed as the original dataset, a feature selection method is proposed to extract the requests and current states as feature vectors. Second, this article presents a rules training algorithm based on L-BFGS to implement the study and training of datasets, and then marks the logs in the test set through Viterbi algorithm automatically. On the base of these, a rule generation algorithm is proposed to dynamically adjust the access control rules based on the current security status and events of the system. Third, the security of CRFs-BLP is proved by theoretical analysis. Finally, the validity and accuracy of the model are verified by estimating the value of the precision, recall, and F1-score. As the system threats are shown to be decreased obviously from these experiments, this dynamic model can decrease the vulnerabilities and risk effectively.
Keyword:
Bell-LaPadula (BLP)
conditional random fields (CRFs)
feature extraction
machine learning
mandatory access control (MAC)
model training
rule optimization
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Cybernetics 封面图
IEEE Transactions on Cybernetics
IF:
10.5
论文数:
1.1W
被引数:
5.0W

机构

H
hunan university
学者数:
4.5W
论文数: 3.3W
被引数: 70
引用论文

引用论文

The MediChew®technology platform
err2005-09-16
err0
PREAI
errBirgitte Hyrup; Carsten Andersen; Lars Vibe Andreasen; Bo Tandrup; Torben Christensen
err分享
err收藏
Pharmacokinetic analysis of cloxacillin loss in children undergoing major surgery with massive bleeding
err1990-06-01
err0
errOAAI
errM Levy; P Egersegi; A Strong; A Tessoro; M Spino; R Bannatyne; D Fear; J C Posnick; G Koren
err分享
err收藏
Analysis of named entity recognition and linking for tweetsTweet的命名实体识别与链接分析
err2015-03-01
err204
errOAAI
errDerczynski, Leon; Maynard, Diana; Rizzo, Giuseppe; van Erp, Marieke; Gorrell, Genevieve; Troncy, Raphael; Petrak, Johann; Bontcheva, Kalina
err分享
err收藏
Observation of double-charge discrete vortex solitons in hexagonal photonic lattices
err2009-04-21
err0
errOAAI
errBernd Terhalle; Tobias Richter; Kody J. H. Law; Dennis Göries; Patrick Rose; Tristram J. Alexander; Panayotis G. Kevrekidis; Anton S. Desyatnikov; Wieslaw Krolikowski; Friedemann Kaiser; Cornelia Denz; Yuri S. Kivshar
err分享
err收藏
学者 查看更多内容