Information Flow Model for Commercial Security

Information flow in Discretionary Access Control (DAC) is a well-known difficult problem. This paper formalizes the fundamental concepts and establishes a theory of information flow security. A DAC system is information flow secure (IFS), if any data never flows into the hands of owner’s enemies (explicitly denial access list.

Qualitative assessment of access control in a database management system

This paper presents a qualitative assessment of access control in database management system to guide those who wish to implement a discretionary or/and non-discretionary access control model and need some support to choose the access control in database management system (DBMS) best suited to their security requirements. To accomplish this we apply the core concepts related to access control models, and the metrics in NISTIR 7874. The result of this work shows how the database management system chosen, MS SQL Server 2012 supports the core concepts and the most popular access control models: RBAC, DAC and MAC, all these based on NIST 7874 metrics

ПОСЛУГА ПОВНОЇ ДОВІРЧОЇ КОНФІДЕНЦІЙНОСТІ\ud ДЛЯ ЗАХИЩЕНОЇ ОС НА БАЗІ GNU/LINUX\ud З РОЗШИРЕННЯМ RSBAC

Розглядається реалізація послуги безпеки «Повна довірча конфіденційність» для захищеноїопераційної системи (ОС) на базі Linux.\ud Основою для реалізації виступає система розмежування доступу RSBAC. Визначені суттєві недоліки підсистеми довірчого\ud керування у системі RSBAC та запропоноване її вдосконалення. Модифікація підсистеми гарантує дотримання усіх вимог на\ud реалізацію послуги безпеки.\ud An implementation of a discretionary access control security service for a trusted OS based on GNU/Linux is considered. The\ud implementation is based on RSBAC access control system. Some significant drawbacks of the discretionary acccess control subsystem in\ud RSBAC are identified and its improvement is proposed. Modification of the subsystem guarantees that all requirements to the\ud implementation of the security service are met

Personalized Nutrition Advice Reduces Intake of Discretionary Foods and Beverages: Findings From the Food4Me Randomized Controlled Trial

© 2021 American Society for Nutrition. Published by Elsevier Inc. This is an open access article distributed under the Creative Commons Attribution License, https://creativecommons.org/licenses/by-nc-nd/4.0/Objectives This study aimed to examine changes in intake of discretionary foods and beverages following a personalized nutrition intervention using two national classifications for discretionary foods. Methods Participants were recruited into a 6-month RCT across seven European countries (Food4Me) and were randomized to receive generalized dietary advice (Control) or one of three levels of personalized nutrition advice (based on dietary, phenotypic and genotypic information). Dietary intake from a FFQ was used to determine change between baseline and month 6 in (i) % energy, % contribution to total fat, SFA, total sugars and salt and (ii) contribution (%) made by sweets and snacks to intake of total fat, SFA, sugars and salt from discretionary foods and beverages, defined by Food Standards Scotland (FSS) and the Australian Dietary Guidelines (ADG). Results A total of 1270 adults (40.9 (SD 13.0) years; 57% female) completed the intervention. At month 6, percentage sugars from FSS discretionary items was lower in personalized nutrition vs control (19.0 ± 0.37 vs 21.1 ± 0.65; P = 0.005). Percentage energy (31.2 ± 0.59 vs 32.7 ± 0.59; P = 0.031), % total fat (31.5 ± 0.37 vs 33.3 ± 0.65; P = 0.021), SFA (36.0 ± 0.43 vs 37.8 ± 0.75; P = 0.034) and sugars (31.7 ± 0.44 vs 34.7 ± 0.78; P < 0.001) from ADG discretionary items were lower in personalized nutrition vs control. The % contribution of sugars from sweets and snacks was lower in personalized nutrition vs control (19.1 ± 0.36 vs 21.5 ± 0.63; P < 0.001). At 3 months, effects were consistent for ADG discretionary items, while there was no significant differences in personalized nutrition vs control for FSS discretionary items. Conclusions Compared with generalized dietary advice, personalized nutrition advice achieved greater reductions in intake of discretionary foods and beverages when the classification included all foods high in fat, added sugars and salt. Future personalized nutrition strategies may be used to target intake of discretionary foods and beverages. Funding Sources European Commission Food, Agriculture, Fisheries and Biotechnology Theme of the Seventh Framework Programme for Research and Technological Development [265494]. KML is supported by a NHMRC Emerging Leadership Fellowship (APP1173803).Peer reviewe

Provisional Access Control Model for Mobile Ad-Hoc Environments: Application to Mobile Electronic Commerce

Role-based Access Control (RBAC) became popular because it can handle the complicated enterprise-wide access requests while traditional access control models such as mandatory access control and discretionary access control cannot. However, it is not suitable for a mobile environment because (i) there is no central trusted authentication entity that activates each user’s roles, (ii) there are not many roles involved in such environment, and (iii) access control decisions depend on specific actions to be performed before the decision is taken. In this paper, we introduce a provisional authorization model with location-based predicates embedded in the policy specification languages. It includes three classes of location-based conditions such as position-based, movement-based, and interaction-based conditions. As a result, users can specify their own privacy/security policies in a mobile ad-hoc environment such as mobile auction markets