Abstract:Thanks to the advent of the Internet, it is now possible to easily share vast amounts of electronic information and computer resources (which include hardware, computer services, etc.) in open distributed environments. These environments serve as a common platform for heterogeneous users (e.g., corporate, individuals etc.) by hosting customized user applications and systems, providing ubiquitous access to the shared resources and requiring less administrative efforts; as a result, they enable users and companies to increase their productivity. Unfortunately, sharing of resources in open environments has significantly increased the privacy threats to the users. Indeed, shared electronic data may be exploited by third parties, such as Data Brokers, which may aggregate, infer and redistribute (sensitive) personal features, thus potentially impairing the privacy of the individuals. A way to palliate this problem consists on controlling the access of users over the potentially sensitive resources. Specifically, access control management regulates the access to the shared resources according to the credentials of the users, the type of resource and the privacy preferences of the resource/data owners. The efficient management of access control is crucial in large and dynamic environments. Moreover, in order to propose a feasible and scalable solution, we need to get rid of manual management of rules/constraints (in which most available solutions rely) that constitutes a serious burden for the users and the administrators. Finally, access control management should be intuitive for the end users, who usually lack technical expertise, and they may find access control mechanism more difficult to understand and rigid to apply due to its complex configuration settings.

OpenStack Security Modules: A Least-Invasive Access Control Framework for the Cloud

Multipol: Towards A Multi-Policy Authorization Framework For Restful Interfaces In The Cloud

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Securing Open Source Clouds Using Models

Leveraging OpenStack and Ceph for a Controlled-Access Data Cloud

Leveraging Network Functions Virtualization Orchestrators to Achieve Software-Defined Access Control in the Clouds

Making Least Privilege The Low-Hanging Fruit In Clouds

Design and Implementation of Access Control As a Service for IaaS Cloud

A Hierarchical Access Control Technology for Cloud Storage

Probing the Scheduling Algorithms in the Cloud Based on OpenStack.

Ontology-based Access Control in Open Scenarios: Applications to Social Networks and the Cloud

Tualatin: Towards Network Security Service Provision in Cloud Datacenters

PML: An Interpreter-Based Access Control Policy Language for Web Services

Towards a secure controller platform for openflow applications.

Trust Based Access Control Framework for R-OSGi

Policy-driven security management for fog computing: Preliminary framework and a case study

P_FACSM:fair Access Control Safe Model for PaaS

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

Risk-Driven Compliant Access Controls for Clouds

Collaboration-Based Cloud Computing Security Management Framework