Attribute-Based Access Control: Insights and Challenges

Slides:

Advertisements

Similar presentations

INSTITUTE FOR CYBER SECURITY 1 Application-Centric Security: How to Get There Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber.

Advertisements

1 PANEL Solving the Access Control Puzzle: Finding the Pieces and Putting Them Together Ravi Sandhu Executive Director Endowed Professor June 2010

Institute for Cyber Security

1 New Trends and Challenges in Computer Network Security Ravi Sandhu Executive Director and Endowed Professor September 2010

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

Future of Access Control: Attributes, Automation, Adaptation

1 A Unified Attribute-Based Access Control Model Covering DAC, MAC and RBAC Prof. Ravi Sandhu Executive Director and Endowed Chair DBSEC July 11, 2012.

1 Security and Trust Convergence: Attributes, Relations and Provenance Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown.

Attribute-Based Access Control Models and Beyond

1 Plenary Panel on Cloud Security and Privacy: What is new and What needs to be done? Ravi Sandhu Executive Director and Endowed Professor December 2010.

1 Attribute-Based Access Control Models and Beyond Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair in Cyber.

11 World-Leading Research with Real-World Impact! Role and Attribute Based Collaborative Administration of Intra-Tenant Cloud IaaS (Invited Paper) Xin.

1 Institute for Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair February 4, 2015

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

1 Big Data Applications in Cloud and Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Professor UTSA COB Symposium on Big Data, Big Challenges.

1 Grand Challenges in Authorization Systems Prof. Ravi Sandhu Executive Director and Endowed Chair November 14, 2011

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

1 Group-Centric Models for Secure Information Sharing Prof. Ravi Sandhu Executive Director and Endowed Chair March 30, 2012

1 Attribute-Based Access Control Models and Beyond Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair in Cyber.

1 Panel on Data Usage Management: Technology or Regulation? Prof. Ravi Sandhu Executive Director and Endowed Chair DUMA 2013 May 23, 2013

1 Security and Privacy in Human-Centric Computing and Big Data Management Prof. Ravi Sandhu Executive Director and Endowed Chair CODASPY 2013 February.

1 The Authorization Leap from Rights to Attributes: Maturation or Chaos? Prof. Ravi Sandhu Executive Director and Endowed Chair SecurIT 2012 August 17,

ReBAC in ABAC Tahmina Ahmed Department of Computer Science University of Texas at San Antonio 4/29/ Institute for Cyber Security World-Leading Research.

1 Role-Based Access Control (RBAC) Prof. Ravi Sandhu Executive Director and Endowed Chair January 29, © Ravi.

1 Secure Cloud Computing: A Research Perspective Prof. Ravi Sandhu Executive Director and Endowed Chair Texas Fresh Air Big Data and Data Analytics Conference.

INSTITUTE FOR CYBER SECURITY 1 Purpose-Centric Secure Information Sharing Ravi Sandhu Executive Director and Endowed Professor Institute for Cyber Security.

Institute for Cyber Security

Institute for Cyber Security

Institute for Cyber Security

Institute for Cyber Security

World-Leading Research with Real-World Impact!

An Access Control Perspective on the Science of Security

Institute for Cyber Security (ICS) & Center for Security and Privacy Enhanced Cloud Computing (C-SPECC) Ravi Sandhu Executive Director Professor of.

UTSA's New Center Center for Security and Privacy Enhanced Cloud Computing (C-SPECC) Ravi Sandhu Executive Director of ICS and C-SPECC Professor.

Introduction to Cyber Security

Institute for Cyber Security: Research Vision

Role-Based Access Control (RBAC)

Identity and Access Control in the

Executive Director and Endowed Chair

Cyber Security Research: Applied and Basic Combined*

On the Value of Access Control Models

Institute for Cyber Security

Institute for Cyber Security

ABAC Panel Prof. Ravi Sandhu Executive Director and Endowed Chair

Institute for Cyber Security

Attribute-Based Access Control (ABAC)

Cyber Security Research: Applied and Basic Combined*

Institute for Cyber Security: Research Vision

Security and Privacy in the Age of the Internet of Things:

Intersection of Data, Policy and Privacy

Authentication and Authorization Federation

UTSA Cyber Security Ecosystem

Attribute-Based Access Control: Insights and Challenges

Cyber Security and Privacy: An Optimist’s Perspective

Identity and Access Control in the

Executive Director and Endowed Chair

Cyber Security Trends and Challenges

World-Leading Research with Real-World Impact!

Institute for Cyber Security Overview

ASCAA Principles for Next-Generation Role-Based Access Control

Assured Information Sharing

Institute for Cyber Security

Cyber Security Research: A Personal Perspective

Cyber Security Research: Applied and Basic Combined*

World-Leading Research with Real-World Impact!

Attribute-Based Access Control (ABAC)

Access Control Evolution and Prospects

Cyber Security R&D: A Personal Perspective

World-Leading Research with Real-World Impact!

Access Control Evolution and Prospects

Presentation transcript:

Attribute-Based Access Control: Insights and Challenges Ravi Sandhu Executive Director and Chief Scientist Professor of Computer Science Lutcher Brown Chair in Cyber Security Baylor University February 9, 2018 ravi.sandhu@utsa.edu www.ics.utsa.edu www.cspecc.utsa.edu www.profsandhu.com World-Leading Research with Real-World Impact!

ICS Mission and History Sustained excellence in graduate-level sponsored research 2012-2017 Graduated to a self-sustaining operation 2007-2012 Founded by start-up funding from State of Texas 2017-2022 Major expansion by winning NSF C-SPECC grant In collaboration with: College of Engineering College of Business College of Education Open Cloud Institute Cyber Center for Security & Analytics Situated in the College of Science, Department of Computer Science Established world class laboratories for: Secure cloud computing and Malware research © Ravi Sandhu World-Leading Research with Real-World Impact!

Natural vs Cyber Science Elephant Problem Cyber-Elephant Problem The cyber-elephant problem requires Applied and Basic research Combined (ABC) * The New ABCs of Research, Ben Schneiderman, 2016 © Ravi Sandhu World-Leading Research with Real-World Impact!

ICS Major Research Areas SECURITY TECHNOLOGIES Access Control Policy Malware Detection and Forensics Security Dynamics APPLICATION DOMAINS Cloud Computing Internet of Things (IoT) Social Networks Enterprise Goal: Broaden and Deepen © Ravi Sandhu World-Leading Research with Real-World Impact!

Cyber Security Landscape Objectives POLICY ATTACKS What? Why? Enforce Enable Defend Respond PROTECT DETECT Complement How? Mechanisms © Ravi Sandhu World-Leading Research with Real-World Impact!

Cyber Security Landscape Objectives POLICY ATTACKS What? Why? Enforce Enable Defend Respond Access Control PROTECT DETECT Complement How? Mechanisms © Ravi Sandhu World-Leading Research with Real-World Impact!

Cyber Security Landscape Objectives POLICY ATTACKS What? Why? Enforce Enable Defend Respond Access Control PROTECT DETECT Complement How? Mechanisms © Ravi Sandhu World-Leading Research with Real-World Impact!

Access Control Evolution Fixed policy Discretionary Access Control (DAC), 1970 Mandatory Access Control (MAC), 1970 Role Based Access Control (RBAC), 1995 Attribute Based Access Control (ABAC), ???? Flexible policy Born 1990s © Ravi Sandhu World-Leading Research with Real-World Impact!

ABAC Research Space 7. ABAC Design, Engineering and Applications 5. ABAC Policy Architectures and Languages 2. Core ABAC Models 3. Administrative ABAC Models 4. Extended 6. ABAC Enforcement Architectures 1. Foundational Principles and Theory © Ravi Sandhu World-Leading Research with Real-World Impact!

Core ABAC Models: ABACα Can be configured to do simple forms of DAC, MAC, RBAC (Jin, Krishnan, Sandhu 2012) © Ravi Sandhu World-Leading Research with Real-World Impact!

Core ABAC Models: ABACα Policy Configuration Points Can be configured to do simple forms of DAC, MAC, RBAC (Jin, Krishnan, Sandhu 2012) © Ravi Sandhu World-Leading Research with Real-World Impact!

Core ABAC Models: ABACβ Can further be configured to do many RBAC extensions (Jin, Krishnan, Sandhu 2014) © Ravi Sandhu World-Leading Research with Real-World Impact!

Administrative ABAC Models: HGABAC Hierarchical Group and Attribute Based Access Control (HGABAC) Introduces User and Object Groups Simplifies administration of attributes Servos and Osborn, 2015 © Ravi Sandhu World-Leading Research with Real-World Impact!

ABAC Applications: Cloud Enabled IoT Alsheri, Bhatt, Patwa, Benson, Sandhu 2016 onwards © Ravi Sandhu World-Leading Research with Real-World Impact!

Policy Architecture: Amazon AWS style © Ravi Sandhu World-Leading Research with Real-World Impact!

ABAC Research Space * * * * 7. ABAC Design, Engineering and Applications 5. ABAC Policy Architectures and Languages * 2. Core ABAC Models 3. Administrative ABAC Models 4. Extended 6. ABAC Enforcement Architectures * * 1. Foundational Principles and Theory © Ravi Sandhu World-Leading Research with Real-World Impact!

Extended ABAC Models: ReBAC versus ABAC ReBAC and ABAC are not that different (Tahmina, Sandhu 2017) © Ravi Sandhu World-Leading Research with Real-World Impact!

ABAC Enforcement Architecture: Federated ABAC Fisher 2015 NCCOE, NIST, Building Block © Ravi Sandhu World-Leading Research with Real-World Impact!

Foundations: Safety Analysis Discretionary Access Control (DAC), 1970 Mandatory Access Control (MAC), 1970 Role Based Access Control (RBAC), 1995 Attribute Based Access Control (ABAC), ???? Can subject s obtain a right r on object o? Current state? Some future state? Safety Complexity Ahmed, Rajkumar, Sandhu 2016 onwards © Ravi Sandhu World-Leading Research with Real-World Impact!