Working set-based access control for network file systems

Securing access to files is an important and growing concern in corporate environments. Employees are increasingly accessing files from untrusted devices, including personal home computers and mobile devices, such as smart phones, which are not under the control of the corporation, and may be infected with viruses, worms, and other malware. In such cases, it is crucial to protect the confidentiality and integrity of corporate data from malicious accesses. This paper proposes a novel scheme called Working SetBased Access Control (WSBAC) to restrict network file system accesses from untrusted devices. The key idea is to continuously observe and extract working sets for users when they access files from trusted devices and use the working sets to restrict user file accesses from untrusted devices. This paper reports on the design and implementation of tools to automatically extract working sets, and transparently enforce WSBAC without requiring changes to the file system. Our expe...

• Type: Conference
• Year: 2009
• Where: SACMAT
• Authors: Stephen Smaldone, Vinod Ganapathy, Liviu Iftode
• Keywords: Access Control, SACMAT 2009, Security Privacy, Untrusted Devices, Working Set