Publications

Authors:

Hasel Mehri, Gelareh; Wester, Inez L.; Paci, Federica; Zannone, Nicola

Title:

Mitigating Privilege Misuse in Access Control through Anomaly Detection

Year:

2023

Type of item:

Contributo in atti di convegno

Tipologia ANVUR:

Contributo in Atti di convegno

Language:

Inglese

Congresso:

18th International Conference on Availability, Reliability and Security

Place:

Benevento

Period:

August 29–September 01, 2023

Publisher:

ASSOC COMPUTING MACHINERY

Page numbers:

1-10

Keyword:

Privilege misuse; User profiling; Behavioral patterns

Short description of contents:

Access control is a fundamental component of IT systems to guarantee the confidentiality and integrity of sensitive resources. However, access control systems have inherent limitations: once permissions have been assigned to users, access control systems do not provide any means to prevent users from misusing such permissions. The problem of privilege misuse is typically addressed by employing auditing mechanisms, which verify users' activities a posteriori. However, auditing does not allow for the timely detection and mitigation of privilege misuse. In this work, we propose a framework that complements access control with anomaly detection for the run-time monitoring of access requests and raises an alert when a user diverges from her normal access behavior. To detect anomalous access requests, we propose a novel approach to build user profiles by eliciting patterns of typical access behavior from historical access data. We evaluated our framework using the access log of a hospital. The results show that our framework has very few false positives and can detect several attack scenarios.

Product ID:

139319

Handle IRIS:

11562/1125729

Last Modified:

May 6, 2024

Bibliographic citation:

Hasel Mehri, Gelareh; Wester, Inez L.; Paci, Federica; Zannone, Nicola, Mitigating Privilege Misuse in Access Control through Anomaly Detection  in Proceedings of 18th International Conference on Availability, Reliability and Security , ASSOC COMPUTING MACHINERY , Proceedings of "18th International Conference on Availability, Reliability and Security" , Benevento , August 29–September 01, 2023 , 2023 , pp. 1-10

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo