Pubblicazioni

Autori:

Hasel Mehri, Gelareh; Wester, Inez L.; Paci, Federica; Zannone, Nicola

Titolo:

Mitigating Privilege Misuse in Access Control through Anomaly Detection

Anno:

2023

Tipologia prodotto:

Contributo in atti di convegno

Tipologia ANVUR:

Contributo in Atti di convegno

Lingua:

Inglese

Titolo del Convegno:

18th International Conference on Availability, Reliability and Security

Luogo:

Benevento

Periodo:

August 29–September 01, 2023

Casa editrice:

ASSOC COMPUTING MACHINERY

Intervallo pagine:

1-10

Parole chiave:

Privilege misuse; User profiling; Behavioral patterns

Breve descrizione dei contenuti:

Access control is a fundamental component of IT systems to guarantee the confidentiality and integrity of sensitive resources. However, access control systems have inherent limitations: once permissions have been assigned to users, access control systems do not provide any means to prevent users from misusing such permissions. The problem of privilege misuse is typically addressed by employing auditing mechanisms, which verify users' activities a posteriori. However, auditing does not allow for the timely detection and mitigation of privilege misuse. In this work, we propose a framework that complements access control with anomaly detection for the run-time monitoring of access requests and raises an alert when a user diverges from her normal access behavior. To detect anomalous access requests, we propose a novel approach to build user profiles by eliciting patterns of typical access behavior from historical access data. We evaluated our framework using the access log of a hospital. The results show that our framework has very few false positives and can detect several attack scenarios.

Id prodotto:

139319

Handle IRIS:

11562/1125729

ultima modifica:

6 maggio 2024

Citazione bibliografica:

Hasel Mehri, Gelareh; Wester, Inez L.; Paci, Federica; Zannone, Nicola, Mitigating Privilege Misuse in Access Control through Anomaly Detection  in Proceedings of 18th International Conference on Availability, Reliability and Security , ASSOC COMPUTING MACHINERY , Atti di "18th International Conference on Availability, Reliability and Security" , Benevento , August 29–September 01, 2023 , 2023 , pp. 1-10

Consulta la scheda completa presente nel repository istituzionale della Ricerca di Ateneo