Enhancing Access-Control with Risk-Metrics for Collaboration on Social Cloud-Platforms

Ahmed Bouchami (1) , Elio Goettelmann (1) , Olivier Perrin (1) , Claude Godart (2)

1 COAST - Web Scale Trustworthy Collaborative Service Systems
2 LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications

Cloud computing promotes the exchange of information , resources and tasks between different organizations by facilitating the deployment and adoption of centralized collaboration platforms: Professional Social Networking (PSN). However, issues concerning security management are preventing their widespread use, as organizations still need to protect some of their sensitive data. Traditional access control policies, defined over the triplet (User, Action, Resource) are difficult to put in place in such highly dynamic environments. In this paper, we introduce risk metrics in existing access control systems to combine the fine-grained policies defined at the user level, with a global risk-policy defined at the organization's level. Experiments show the impact of our approach when deployed on traditional systems.

Mots clés: Enterprise social networking; Security; Risk; Cloud; Access control

Domaines: Informatique [cs]; Cryptographie et sécurité [cs.CR]; Réseaux sociaux et d'information [cs.SI]

Ahmed Bouchami, Elio Goettelmann, Olivier Perrin, Claude Godart. Enhancing Access-Control with Risk-Metrics for Collaboration on Social Cloud-Platforms. TrustCom-BigDataSE-ISPA 2015, Aug 2015, Helsinki, Finland. ⟨10.1109/Trustcom.2015.458⟩. ⟨hal-01240381⟩