|
|
Framework and DSL for Ensemble-Based Access Control
Matějek, Jan ; Bureš, Tomáš (advisor) ; Kofroň, Jan (referee)
Access control policies typically take the form of a set of static rules pertaining to individual entities under control. This can be impractical in real-world scenarios: authorization invariably depends on wider situational context which often tends to be highly dynamic. This leads to increasingly complex rules, which have to change over time to reflect the evolution of the controlled system. Ensemble-based architectures allow dynamic formation of goal-oriented groups in systems with large number of independent autonomous components. Because of the ad-hoc and situation-aware nature of group formation, ensembles offer a novel way of approaching access control. The goal of this work is to design a Scala framework and internal DSL for describing access control related situations via ensembles. In particular, the framework will define ensemble semantics suitable for evaluating the ensembles and establishing access control at runtime.
|
|
|
Framework and DSL for Ensemble-Based Access Control
Matějek, Jan ; Bureš, Tomáš (advisor) ; Kofroň, Jan (referee)
Access control policies typically take the form of a set of static rules pertaining to individual entities under control. This can be impractical in real-world scenarios: authorization invariably depends on wider situational context which often tends to be highly dynamic. This leads to increasingly complex rules, which have to change over time to reflect the evolution of the controlled system. Ensemble-based architectures allow dynamic formation of goal-oriented groups in systems with large number of independent autonomous components. Because of the ad-hoc and situation-aware nature of group formation, ensembles offer a novel way of approaching access control. The goal of this work is to design a Scala framework and internal DSL for describing access control related situations via ensembles. In particular, the framework will define ensemble semantics suitable for evaluating the ensembles and establishing access control at runtime.
|
|
|
Protokol pro sdílení souborů
Matějek, Jan ; Mareš, Martin (advisor) ; Falt, Zbyněk (referee)
Today's networked computing environments rely heavily on the ability to efficiently transfer data between computers. In order to understand the issues and challenges involved in sharing files and publishing directory trees over a computer network, we examined and summarized features of a number of popular protocols. Using this knowledge, we designed NewTP, a modern file sharing protocol suitable for the Internet. Special emphasis was placed on simplicity of implementation and resistance to attacks. We have proven the protocol's real-world viability by implementing a reference server and a FUSE filesystem module. Powered by TCPDF (www.tcpdf.org)
|
guest ::
RSS feed.