Please use this identifier to cite or link to this item:
https://hdl.handle.net/20.500.11851/5730
Full metadata record
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Burakgazi, Bilgen M. | - |
dc.contributor.author | Bıçakcı, Kemal | - |
dc.date.accessioned | 2021-09-11T15:19:47Z | - |
dc.date.available | 2021-09-11T15:19:47Z | - |
dc.date.issued | 2020 | en_US |
dc.identifier.citation | 13th International Conference on Information Security and Cryptology, ISCTURKEY 2020, 3 December 2020 through 4 December 2020, , 166977 | en_US |
dc.identifier.isbn | 9781665418638 | - |
dc.identifier.uri | https://doi.org/10.1109/ISCTURKEY51113.2020.9307964 | - |
dc.identifier.uri | https://hdl.handle.net/20.500.11851/5730 | - |
dc.description.abstract | Internet of Things (IoT) brings not only wide range of opportunities but also security and privacy concerns. Consisting of many connected devices used in a highly interactive way, one of the main security concerns in IoT is unauthorized access. Traditional access control models do not support dynamic and fine-grained access control policies. Attribute-Based Access Control (ABAC) model is usually considered the most satisfactory access control model for running IoT applications. In this paper, we propose to take into the user authentication matching score obtained from a biometric authentication system consideration during making access control decisions. We emphasize the need of fine-grained access control and suggest to create access control policies per functionality of the device instead of per device regarding to the least privilege principle of information security. We give full or partial permission to certain functionalities of the IoT devices based on the user's authentication matching score thus provide more fine-grained and powerful access control mechanism. We present an extended Attribute-Based Access Control model that includes the assurance level of user authentication in access control policies and partially or fully permit the request accordingly. © 2020 IEEE. | en_US |
dc.description.sponsorship | Aselsan;Havelsan;Huawei;NETAS;TURKSAT | en_US |
dc.language.iso | en | en_US |
dc.publisher | Institute of Electrical and Electronics Engineers Inc. | en_US |
dc.relation.ispartof | 2020 International Conference on Information Security and Cryptology, ISCTURKEY 2020 - Proceedings | en_US |
dc.rights | info:eu-repo/semantics/closedAccess | en_US |
dc.title | Extending Attribute-Based Access Control Model With Authentication Information for Internet of Things | en_US |
dc.type | Conference Object | en_US |
dc.department | Faculties, Faculty of Engineering, Department of Computer Engineering | en_US |
dc.department | Fakülteler, Mühendislik Fakültesi, Bilgisayar Mühendisliği Bölümü | tr_TR |
dc.identifier.startpage | 48 | en_US |
dc.identifier.endpage | 55 | en_US |
dc.identifier.wos | WOS:000676395800007 | en_US |
dc.identifier.scopus | 2-s2.0-85101156307 | en_US |
dc.institutionauthor | Bıçakcı, Kemal | - |
dc.identifier.doi | 10.1109/ISCTURKEY51113.2020.9307964 | - |
dc.relation.publicationcategory | Konferans Öğesi - Uluslararası - Kurum Öğretim Elemanı | en_US |
dc.relation.conference | 13th International Conference on Information Security and Cryptology, ISCTURKEY 2020 | en_US |
item.openairetype | Conference Object | - |
item.languageiso639-1 | en | - |
item.grantfulltext | none | - |
item.fulltext | No Fulltext | - |
item.openairecristype | http://purl.org/coar/resource_type/c_18cf | - |
item.cerifentitytype | Publications | - |
crisitem.author.dept | 02.3. Department of Computer Engineering | - |
Appears in Collections: | Bilgisayar Mühendisliği Bölümü / Department of Computer Engineering Scopus İndeksli Yayınlar Koleksiyonu / Scopus Indexed Publications Collection WoS İndeksli Yayınlar Koleksiyonu / WoS Indexed Publications Collection |
CORE Recommender
WEB OF SCIENCETM
Citations
4
checked on Dec 21, 2024
Page view(s)
110
checked on Dec 16, 2024
Google ScholarTM
Check
Altmetric
Items in GCRIS Repository are protected by copyright, with all rights reserved, unless otherwise indicated.