TY - GEN
T1 - Re-designing the web's access control system (Extended abstract)
AU - Du, Wenliang
AU - Tan, Xi
AU - Luo, Tongbo
AU - Jayaraman, Karthick
AU - Zhu, Zutao
N1 - Funding Information:
This work was supported by Award No. 1017771 from the US National Science Foundation.
PY - 2011
Y1 - 2011
N2 - The Web is playing a very important role in our lives, and is becoming an essential element of the computing infrastructure. With such a glory come the attacks-the Web has become criminals' preferred targets. Web-based vulnerabilities now outnumber traditional computer security concerns. Although various security solutions have been proposed to address the problems on the Web, few have addressed the root causes of why web applications are so vulnerable to these many attacks. We believe that the Web's current access control models are fundamentally inadequate to satisfy the protection needs of today's web, and they need to be redesigned. In this extended abstract, we explain our position, and summarize our efforts in redesigning the Web's access control systems.
AB - The Web is playing a very important role in our lives, and is becoming an essential element of the computing infrastructure. With such a glory come the attacks-the Web has become criminals' preferred targets. Web-based vulnerabilities now outnumber traditional computer security concerns. Although various security solutions have been proposed to address the problems on the Web, few have addressed the root causes of why web applications are so vulnerable to these many attacks. We believe that the Web's current access control models are fundamentally inadequate to satisfy the protection needs of today's web, and they need to be redesigned. In this extended abstract, we explain our position, and summarize our efforts in redesigning the Web's access control systems.
KW - access control model
KW - web security
UR - http://www.scopus.com/inward/record.url?scp=79960258664&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=79960258664&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-22348-8_2
DO - 10.1007/978-3-642-22348-8_2
M3 - Conference contribution
AN - SCOPUS:79960258664
SN - 9783642223471
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 4
EP - 11
BT - Data and Applications Security and Privacy XXV - 25th Annual IFIP WG 11.3 Conference, DBSec 2011, Proceedings
T2 - 25th Annual WG 11.3 Conference on Data and Applications Security and Privacy, DBSec 2011
Y2 - 11 July 2011 through 13 July 2011
ER -