Dynamic user-defined access control policies via programming language / Suzana Ahmad

Allowing data sharing activities to the right users can be determined by concerned access control through assisting every attempt made by a user, to access a resource in an application system. The interests of authorized the users, who are protected by access control, can provide a safe, secure and...

Full description

Saved in:

Bibliographic Details
Main Author:	Ahmad, Suzana
Format:	Thesis
Language:	English
Published:	2018
Subjects:	Electronic Computers Computer Science
Online Access:	https://ir.uitm.edu.my/id/eprint/26960/1/TP_SUZANA%20AHMAD%20CS%2018_5.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-uitm-ir.26960
record_format	uketd_dc
spelling	my-uitm-ir.269602022-06-14T06:59:15Z Dynamic user-defined access control policies via programming language / Suzana Ahmad 2018 Ahmad, Suzana Electronic Computers. Computer Science Allowing data sharing activities to the right users can be determined by concerned access control through assisting every attempt made by a user, to access a resource in an application system. The interests of authorized the users, who are protected by access control, can provide a safe, secure and accessible working environment. Implementation of access control involves three important issues, which include policies, models and mechanisms. The appointed administrator has the authorization to manage the access of data sharing under every possible circumstance by specifying the model of access control as high-level requirements for policy mechanisms. Commonly, most application systems rely on an administrator to manage access control policies which may lead to conflicts between users and the administrators empowerment. Such conflicts exist due to lack of involvement from end-users in handling the access control. Another issue raised, is those of unrevised services, which occur frequently due to massive and complex policy details that need to be handled by the administrator. Additionally, most programming languages and programming environments do not naturally support implementing policy for access control. Nevertheless, the policy needs to be coded as part of the system development for managing access control. Furthermore, access control policies are high-level features, which require high cost maintenance. This thesis examines the control mechanisms in data sharing activities among collaborative users. The results of the research undertaken offers a model that allows data owners to provision access control policies in collaborative data sharing environments via a specific programming language. The model supports dynamic owner-centered empowerment of data access control policy that allows data owners to have control of their own data. The policy can change dynamically according to the data owners needs during collaborative sessions. The proposed model also facilitates explicit access control mechanisms for the data owner to secure his or her data. The investigation uses real life observation on an uncontrolled environment of public and private data sharing as a method to identify missing mechanisms for data owners access control empowerment. A banking system is selected to examine the existing access control mechanism by using an abstract scene approach. This is achieved through observation and the examination of both the existing and non-existing mechanisms, in order to accommodate the data sharing process. In addition, this research extends the experiment through a small-scale case study using a controlled variation of the rules for a modified scrabble game to uncover a list of control policy states. Both findings are modeled and prescribed in the form of language constructs to accommodate the solution and testing. Therefore, a set of language constructs are designed and implemented on an existing scripting language JACIE (Java based Authoring language for Collaborative Interactive Environments) that allows rapid prototyping on the result and testing. Major extensions on JACIE are performed to verify the model. This model will significantly accommodate a comprehensive framework of data sharing among different levels of organizations (government and private sectors) in wider perspectives. 2018 Thesis https://ir.uitm.edu.my/id/eprint/26960/ https://ir.uitm.edu.my/id/eprint/26960/1/TP_SUZANA%20AHMAD%20CS%2018_5.pdf text en public phd doctoral Universiti Teknologi MARA Faculty of Computer and Mathematical Sciences
institution	Universiti Teknologi MARA
collection	UiTM Institutional Repository
language	English
topic	Electronic Computers Computer Science
spellingShingle	Electronic Computers Computer Science Ahmad, Suzana Dynamic user-defined access control policies via programming language / Suzana Ahmad
description	Allowing data sharing activities to the right users can be determined by concerned access control through assisting every attempt made by a user, to access a resource in an application system. The interests of authorized the users, who are protected by access control, can provide a safe, secure and accessible working environment. Implementation of access control involves three important issues, which include policies, models and mechanisms. The appointed administrator has the authorization to manage the access of data sharing under every possible circumstance by specifying the model of access control as high-level requirements for policy mechanisms. Commonly, most application systems rely on an administrator to manage access control policies which may lead to conflicts between users and the administrators empowerment. Such conflicts exist due to lack of involvement from end-users in handling the access control. Another issue raised, is those of unrevised services, which occur frequently due to massive and complex policy details that need to be handled by the administrator. Additionally, most programming languages and programming environments do not naturally support implementing policy for access control. Nevertheless, the policy needs to be coded as part of the system development for managing access control. Furthermore, access control policies are high-level features, which require high cost maintenance. This thesis examines the control mechanisms in data sharing activities among collaborative users. The results of the research undertaken offers a model that allows data owners to provision access control policies in collaborative data sharing environments via a specific programming language. The model supports dynamic owner-centered empowerment of data access control policy that allows data owners to have control of their own data. The policy can change dynamically according to the data owners needs during collaborative sessions. The proposed model also facilitates explicit access control mechanisms for the data owner to secure his or her data. The investigation uses real life observation on an uncontrolled environment of public and private data sharing as a method to identify missing mechanisms for data owners access control empowerment. A banking system is selected to examine the existing access control mechanism by using an abstract scene approach. This is achieved through observation and the examination of both the existing and non-existing mechanisms, in order to accommodate the data sharing process. In addition, this research extends the experiment through a small-scale case study using a controlled variation of the rules for a modified scrabble game to uncover a list of control policy states. Both findings are modeled and prescribed in the form of language constructs to accommodate the solution and testing. Therefore, a set of language constructs are designed and implemented on an existing scripting language JACIE (Java based Authoring language for Collaborative Interactive Environments) that allows rapid prototyping on the result and testing. Major extensions on JACIE are performed to verify the model. This model will significantly accommodate a comprehensive framework of data sharing among different levels of organizations (government and private sectors) in wider perspectives.
format	Thesis
qualification_name	Doctor of Philosophy (PhD.)
qualification_level	Doctorate
author	Ahmad, Suzana
author_facet	Ahmad, Suzana
author_sort	Ahmad, Suzana
title	Dynamic user-defined access control policies via programming language / Suzana Ahmad
title_short	Dynamic user-defined access control policies via programming language / Suzana Ahmad
title_full	Dynamic user-defined access control policies via programming language / Suzana Ahmad
title_fullStr	Dynamic user-defined access control policies via programming language / Suzana Ahmad
title_full_unstemmed	Dynamic user-defined access control policies via programming language / Suzana Ahmad
title_sort	dynamic user-defined access control policies via programming language / suzana ahmad
granting_institution	Universiti Teknologi MARA
granting_department	Faculty of Computer and Mathematical Sciences
publishDate	2018
url	https://ir.uitm.edu.my/id/eprint/26960/1/TP_SUZANA%20AHMAD%20CS%2018_5.pdf
_version_	1783733918278615040

Dynamic user-defined access control policies via programming language / Suzana Ahmad

Similar Items