ABAC Panel Prof. Ravi Sandhu Executive Director and Endowed Chair

Slides:

Advertisements

Similar presentations

INSTITUTE FOR CYBER SECURITY 1 Application-Centric Security: How to Get There Prof. Ravi Sandhu Executive Director and Endowed Chair Institute for Cyber.

Advertisements

Institute for Cyber Security

1 Access Control Models Prof. Ravi Sandhu Executive Director and Endowed Chair January 25, 2013 & February 1, 2013

1 Privacy in Microdata Release Prof. Ravi Sandhu Executive Director and Endowed Chair March 22, © Ravi Sandhu.

1 The Future of Access Control: Attributes, Automation and Adaptation Prof. Ravi Sandhu Executive Director and Endowed Chair S&P Symposium IIT Kanpur March.

Future of Access Control: Attributes, Automation, Adaptation

1 A Unified Attribute-Based Access Control Model Covering DAC, MAC and RBAC Prof. Ravi Sandhu Executive Director and Endowed Chair DBSEC July 11, 2012.

1 Security and Trust Convergence: Attributes, Relations and Provenance Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown.

Attribute-Based Access Control Models and Beyond

1 Plenary Panel on Cloud Security and Privacy: What is new and What needs to be done? Ravi Sandhu Executive Director and Endowed Professor December 2010.

1 Attribute-Based Access Control Models and Beyond Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair in Cyber.

1 Privacy and Access Control: How are These Two Concepts Related? Prof. Ravi Sandhu Executive Director and Endowed Chair SACMAT Panel June 3, 2015

11 World-Leading Research with Real-World Impact! Role and Attribute Based Collaborative Administration of Intra-Tenant Cloud IaaS (Invited Paper) Xin.

1 Institute for Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Chair February 4, 2015

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

1 Big Data Applications in Cloud and Cyber Security Prof. Ravi Sandhu Executive Director and Endowed Professor UTSA COB Symposium on Big Data, Big Challenges.

1 Grand Challenges in Authorization Systems Prof. Ravi Sandhu Executive Director and Endowed Chair November 14, 2011

1 The Science, Engineering, and Business of Cyber Security Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair.

1 Cloud Computing and Security Prof. Ravi Sandhu Executive Director and Endowed Chair April 19, © Ravi Sandhu.

1 Group-Centric Models for Secure Information Sharing Prof. Ravi Sandhu Executive Director and Endowed Chair March 30, 2012

1 Attribute-Based Access Control Models and Beyond Prof. Ravi Sandhu Executive Director, Institute for Cyber Security Lutcher Brown Endowed Chair in Cyber.

1 Panel on Data Usage Management: Technology or Regulation? Prof. Ravi Sandhu Executive Director and Endowed Chair DUMA 2013 May 23, 2013

1 Security and Privacy in Human-Centric Computing and Big Data Management Prof. Ravi Sandhu Executive Director and Endowed Chair CODASPY 2013 February.

1 Open Discussion PSOSM 2012 Prof. Ravi Sandhu Executive Director and Endowed Chair © Ravi Sandhu.

1 Challenges of Cyber Security Education at the Graduate Level Ravi Sandhu Executive Director and Endowed Professor July 27, 2011

1 The Authorization Leap from Rights to Attributes: Maturation or Chaos? Prof. Ravi Sandhu Executive Director and Endowed Chair SecurIT 2012 August 17,

1 Role-Based Access Control (RBAC) Prof. Ravi Sandhu Executive Director and Endowed Chair January 29, © Ravi.

1 Secure Cloud Computing: A Research Perspective Prof. Ravi Sandhu Executive Director and Endowed Chair Texas Fresh Air Big Data and Data Analytics Conference.

INSTITUTE FOR CYBER SECURITY 1 Purpose-Centric Secure Information Sharing Ravi Sandhu Executive Director and Endowed Professor Institute for Cyber Security.

Institute for Cyber Security

Institute for Cyber Security

Institute for Cyber Security

Institute for Cyber Security

Security and Privacy in the Networked World

An Access Control Perspective on the Science of Security

Institute for Cyber Security (ICS) & Center for Security and Privacy Enhanced Cloud Computing (C-SPECC) Ravi Sandhu Executive Director Professor of.

Attribute-Based Access Control (ABAC)

Attribute-Based Access Control: Insights and Challenges

Role-Based Access Control (RBAC)

Identity and Access Control in the

Executive Director and Endowed Chair

The Future of Access Control: Attributes, Automation and Adaptation

Cyber Security Research: Applied and Basic Combined*

On the Value of Access Control Models

Challenge-Response Authentication

Institute for Cyber Security

Institute for Cyber Security

Institute for Cyber Security

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Cyber Security Research: Applied and Basic Combined*

Security and Privacy in the Age of the Internet of Things:

Intersection of Data, Policy and Privacy

Authentication and Authorization Federation

Attribute-Based Access Control: Insights and Challenges

Cyber Security and Privacy: An Optimist’s Perspective

Identity and Access Control in the

Big Data and Privacy Panel Prof. Ravi Sandhu

Executive Director and Endowed Chair

Challenge-Response Authentication

ASCAA Principles for Next-Generation Role-Based Access Control

Assured Information Sharing

Institute for Cyber Security

Cyber Security Research: A Personal Perspective

Cyber Security Research: Applied and Basic Combined*

Attribute-Based Access Control (ABAC)

Access Control Evolution and Prospects

Cyber Security R&D: A Personal Perspective

World-Leading Research with Real-World Impact!

Access Control Evolution and Prospects

Presentation transcript:

ABAC Panel Prof. Ravi Sandhu Executive Director and Endowed Chair ACM Workshop on Attribute-Based Access Control March 24, 2017, Scottsdale, AZ ravi.sandhu@utsa.edu www.profsandhu.com www.ics.utsa.edu © Ravi Sandhu World-Leading Research with Real-World Impact!

Questions What do you see as the need for ABAC in practice? Automation, Adaptability, Analytics, Anonymity What ABAC issues, if any, have been well-studied and addressed by our community? Foundational understanding What challenges remain? Adoption How can academia, industry and NIST engage effectively? Develop consensus, e.g., XACML ≠ ABAC © Ravi Sandhu World-Leading Research with Real-World Impact! 2

Automation Adaptability Analytics (Review) Anonymity (Privacy) The 4 A’s Automation Adaptability Analytics (Review) Anonymity (Privacy) © Ravi Sandhu World-Leading Research with Real-World Impact! 3

Foundational Understanding Discretionary Access Control (DAC), 1970 Mandatory Access Control (MAC), 1970 Relationship Based Access Control (ReBAC), ???? Role Based Access Control (RBAC), 1995 Attribute Based Access Control (ABAC), ???? © Ravi Sandhu World-Leading Research with Real-World Impact! 4

Adoption Historically, industry has built access control mechanisms that are Mathematically incomprehensible Lack rigorous foundations Are over-featured Are under-utilized Can this be changed? How do we make it to 5 A’s? © Ravi Sandhu World-Leading Research with Real-World Impact! 5

Develop Consensus Maybe start with some elementary issues, e.g., XACML ≠ ABAC User-Subject distinction is fundamental © Ravi Sandhu World-Leading Research with Real-World Impact! 6

Questions What do you see as the need for ABAC in practice? Automation, Adaptability, Analytics, Anonymity What ABAC issues, if any, have been well-studied and addressed by our community? Foundational understanding What challenges remain? Adoption How can academia, industry and NIST engage effectively? Develop consensus, e.g., XACML ≠ ABAC © Ravi Sandhu World-Leading Research with Real-World Impact! 7