Towards shrink-wrapped security: Practically incorporating context into security services

Gleneesha Johnson, Paulo Shakarian, Neha Gupta, Ashok Agrawala

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Scopus citations

Abstract

The mobile workforce is rapidly increasing, and technological advances make it feasible for these workers to have ubiquitous access to a variety of resources with various protection requirements. The dynamic computing environment of these workers mandates a security paradigm in which security is tightly coupled with a user's current situation. We have proposed a security paradigm to achieve this, called Shrink-Wrapped Security, in which security is constantly adapting to a user's current situation, and a comprehensive amount of security-relevant context is used to characterize a user's situation. We present an approach that uses generalized annotated programs (GAPs) to practically incorporate such context into security services, with a focus on access control. This allows us to represent context in a principled manner; consistently make security-related decisions; easily make temporary, ad-hoc changes to a security policy; and give a user feedback when access is denied so that she can make the appropriate adjustments.

Original languageEnglish (US)
Title of host publicationProcedia Computer Science
Pages782-787
Number of pages6
Volume5
DOIs
StatePublished - 2011
Externally publishedYes
Event2nd International Conference on Ambient Systems, Networks and Technologies, ANT-2011 and 8th International Conference on Mobile Web Information Systems, MobiWIS 2011 - Niagara Falls, ON, Canada
Duration: Sep 19 2011Sep 21 2011

Other

Other2nd International Conference on Ambient Systems, Networks and Technologies, ANT-2011 and 8th International Conference on Mobile Web Information Systems, MobiWIS 2011
Country/TerritoryCanada
CityNiagara Falls, ON
Period9/19/119/21/11

Keywords

  • Access control
  • Dynamic
  • Generalize annotated programs
  • Mobile users
  • Shrink-wrapped security

ASJC Scopus subject areas

  • Computer Science(all)

Fingerprint

Dive into the research topics of 'Towards shrink-wrapped security: Practically incorporating context into security services'. Together they form a unique fingerprint.

Cite this