Architectural design of an access control system for enterprise networks

Date

2007-11-09

Author

Kirimer, Burak
Özgit, Attila

Metadata

Show full item record

This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

Item Usage Stats

249
views

0
downloads

Client computers in enterprise networks have the potential to be the source of serious security problems, especially when their hardware and software components are out of physical administrative control. Besides, services in the network may have client configuration requirements. We propose a system composed of a policy management and enforcement server and client agents, which authenticates the client users and checks their computer configurations before allowing their access to services. The information modeling within the design is based on common information model. Web services are used for communication, following the related specifications in Web based enterprise management.

Subject Keywords

Access control, Computer networks, Authentication, Computer security, Hardware, Computer interfaces, Data security, Control systems, Operating systems, Computer network management

URI

https://hdl.handle.net/11511/31206

DOI

https://doi.org/10.1109/iscis.2007.4456887

Conference Name

2007 22nd international symposium on computer and information sciences

Collections

Graduate School of Informatics, Conference / Seminar

Suggestions

OpenMETU
Core

Specification and verification of confidentiality in software architectures Ulu, Cemil; Oğuztüzün, Mehmet Halit S.; Department of Computer Engineering (2004) This dissertation addresses the confidentiality aspect of the information security problem from the viewpoint of the software architecture. It presents a new approach to secure system design in which the desired security properties, in particular, confidentiality, of the system are proven to hold at the architectural level. The architecture description language Wright is extended so that confidentiality authorizations can be specified. An architectural description in Wright/c, the extended language, assigns...
Design and implementation of an open security architecture for a software-based security module Kaynar, Kaan; Özgit, Attila; Department of Computer Engineering (2009) Main purpose of this thesis work is to design a comprehensive and open security architecture whose desired parts could be realized on a general-purpose embedded computer without any special cryptography hardware. The architecture provides security mechanisms that implement known cryptography techniques, operations of some famous network security protocols and appropriate system security methods. Consequently, a server machine may offload a substantial part of its security processing tasks to an embedded com...
Security of certificate-based protocols: focus on server authentication Baran, Selim; Özbudak, Ferruh; Selçuk, Ali Aydın; Department of Cryptography (2015) Today, secure communication channels are mostly set up via certificate-based protocols, such as Secure Sockets Layer (SSL) and Transport Layer Security (TLS). Although they have been used for years and in so many areas, from e-commerce and internet banking to secure channel needs in military, there have been several attacks on their security model, which forced researchers to make studies on them. In this thesis, we will explain their security model, the vulnerabilities discovered so far, the precautions fo...
A faster intrusion detection method for high-speed computer networks Tarım, Mehmet Cem; Schmidt, Şenan Ece; Department of Electrical and Electronics Engineering (2011) The malicious intrusions to computer systems result in the loss of money, time and hidden information which require deployment of intrusion detection systems. Existing intrusion detection methods analyze packet payload to search for certain strings and to match them with a rule database which takes a long time in large size packets. Because of buffer limits, packets may be dropped or the system may stop working due to high CPU load. In this thesis, we investigate signature based intrusion detection with sig...
Design and implementation of a monitoring framework Kuz, Kadir; Doğru, Ali Hikmet; Department of Computer Engineering (2009) In this thesis work, the symptoms in Windows XP operating system for fault monitoring are investigated and a fault monitoring library is developed. A test GUI is implemented to examine this library. Performance tests including memory and CPU usage are done to see its overhead to the system and platform tests on the current version of Windows operating system series (Windows Vista) are done to see for compatibility. In this thesis, fault monitor-fault detector interface is also defined and implemented. To mo...

Citation Formats

B. Kirimer and A. Özgit, “Architectural design of an access control system for enterprise networks,” presented at the 2007 22nd international symposium on computer and information sciences, Ankara, Türkiye, 2007, Accessed: 00, 2020. [Online]. Available: https://hdl.handle.net/11511/31206.