【24h】

Incorporating Policy-Based Authorization Framework in Audit Rule Ontology for Continuous Process Auditing in Complex Distributed Systems

机译:将基于策略的授权框架纳入审核规则本体中,以进行复杂分布式系统中的连续过程审核

获取原文

摘要

Complex distributed information systems that run their activities in the form of processes require continuous auditing of a process that invokes the action(s) specified in the policies and rules in a continuous manner. A shared vocabulary, or common ontology, used to defined the processes, and the audit rule ontology for processes or modules are integrated to form a hybrid ontology that supports the acquisition and evolution of ontologies. A methodology to construct a Common Ontology and an audit rule ontology by coupling to an expert system for Continuous Process Auditing (CPA) has been introduced recently. In this paper, we present a policy-based authorization methodology incorporating Audit Rule Ontology for CPA within distributed audit rule ontology. We also propose the use of probabilistic risk determination and evaluation of risk level, along with access history heuristics that define the adaptable access control policies before making policy decisions.
机译:以流程形式运行其活动的复杂的分布式信息系统需要对流程进行连续审核,该流程以连续的方式调用策略和规则中指定的操作。用于定义流程的共享词汇或通用本体,以及用于流程或模块的审核规则本体被集成以形成支持本体的获取和演化的混合本体。最近已经引入了一种方法,该方法可通过与连续过程审核(CPA)的专家系统耦合来构建通用本体和审核规则本体。在本文中,我们提出了一种基于策略的授权方法,该方法将CPA的审核规则本体纳入了分布式审核规则本体中。我们还建议使用概率风险确定和风险级别评估,以及在做出政策决定之前定义可适应性访问控制策略的访问历史试探法。

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号