{"id":"https://openalex.org/W2952391640","doi":"https://doi.org/10.3233/jcs-191306","title":"Mitigating the insider threat of remote administrators in clouds through maintenance task assignments","display_name":"Mitigating the insider threat of remote administrators in clouds through maintenance task assignments","publication_year":2019,"publication_date":"2019-06-17","ids":{"openalex":"https://openalex.org/W2952391640","doi":"https://doi.org/10.3233/jcs-191306","mag":"2952391640"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-191306","doi":"https://doi.org/10.3233/jcs-191306","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191306","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-b","cwts-core","dongbi-c","jufo-2","norway-1","poland-40","russia-white-list-3"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017266517","display_name":"Nawaf Alhebaishi","orcid":"https://orcid.org/0000-0003-0438-4243","observed_orcids":["https://orcid.org/0000-0003-0438-4243"]},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","SA"],"is_corresponding":true,"raw_author_name":"Nawaf Alhebaishi","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","Faculty of Computing and Information Technology, King Abdulaziz University, Jeddag, KSA","Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","institution_ids":["https://openalex.org/I60158472"]},{"raw_affiliation_string":"Faculty of Computing and Information Technology, King Abdulaziz University, Jeddag, KSA","institution_ids":["https://openalex.org/I185163786"]},{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541","observed_orcids":["https://orcid.org/0000-0002-7441-7541"]},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","institution_ids":["https://openalex.org/I60158472"]},{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010727123","display_name":"Sushil Jajodia","orcid":"https://orcid.org/0000-0003-3210-558X","observed_orcids":["https://orcid.org/0000-0003-3210-558X","https://orcid.org/0000-0002-7122-3055"]},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sushil Jajodia","raw_affiliation_strings":["Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0","Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0jajodia@gmu.edu"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0","institution_ids":["https://openalex.org/I162714631"]},{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0jajodia@gmu.edu","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088206056","display_name":"Anoop Singhal","orcid":"https://orcid.org/0000-0002-2602-3927","observed_orcids":["https://orcid.org/0000-0002-2602-3927"]},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anoop Singhal","raw_affiliation_strings":["Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0","Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0anoop.singhal@nist.gov"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0","institution_ids":["https://openalex.org/I1321296531"]},{"raw_affiliation_string":"Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0anoop.singhal@nist.gov","institution_ids":["https://openalex.org/I1321296531"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5017266517"],"corresponding_institution_ids":["https://openalex.org/I185163786","https://openalex.org/I60158472"],"apc_list":{"value":4150,"currency":"USD","value_usd":4150},"apc_paid":null,"fwci":0.2198,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.6222084,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":"27","issue":"4","first_page":"427","last_page":"458"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9312000274658203,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9312000274658203,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.025299999862909317,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.025100000202655792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threats","display_name":"insider threats","score":0.9150000214576721},{"id":"https://openalex.org/keywords/cloud-security","display_name":"cloud security","score":0.7170000076293945},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.9190000295639038},{"id":"https://openalex.org/keywords/third-party-administrators","display_name":"third-party administrators","score":0.7580000162124634},{"id":"https://openalex.org/keywords/cloud-provider-security","display_name":"cloud provider security","score":0.5189999938011169}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7738231420516968},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7681008577346802},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.7679435014724731},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.729218602180481},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6953121423721313},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6778237819671631},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.6007605791091919},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.5802786350250244},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.4859065115451813},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.40971773862838745},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08119785785675049},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jcs-191306","doi":"https://doi.org/10.3233/jcs-191306","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191306","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-b","cwts-core","dongbi-c","jufo-2","norway-1","poland-40","russia-white-list-3"],"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6601999998092651}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321588","display_name":"Concordia University","ror":"https://ror.org/0420zvk78"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W153010205","https://openalex.org/W1489574895","https://openalex.org/W1504280683","https://openalex.org/W1504455947","https://openalex.org/W1512519626","https://openalex.org/W1540221906","https://openalex.org/W1588651819","https://openalex.org/W1918248053","https://openalex.org/W1984126335","https://openalex.org/W1985994373","https://openalex.org/W2009495439","https://openalex.org/W2012246208","https://openalex.org/W2013422737","https://openalex.org/W2013704995","https://openalex.org/W2017140356","https://openalex.org/W2022578767","https://openalex.org/W2031489231","https://openalex.org/W2033082111","https://openalex.org/W2052645878","https://openalex.org/W2054127354","https://openalex.org/W2065527711","https://openalex.org/W2077937403","https://openalex.org/W2091673436","https://openalex.org/W2099103357","https://openalex.org/W2100407515","https://openalex.org/W2103478379","https://openalex.org/W2109026747","https://openalex.org/W2116836841","https://openalex.org/W2121805588","https://openalex.org/W2123363884","https://openalex.org/W2126756319","https://openalex.org/W2131875370","https://openalex.org/W2140354620","https://openalex.org/W2143396794","https://openalex.org/W2150802402","https://openalex.org/W2151369956","https://openalex.org/W2158327591","https://openalex.org/W2161754059","https://openalex.org/W2162302744","https://openalex.org/W2166602595","https://openalex.org/W2196703670","https://openalex.org/W2290944024","https://openalex.org/W2400179508","https://openalex.org/W2417374831","https://openalex.org/W2488221070","https://openalex.org/W2561848028","https://openalex.org/W2563003400","https://openalex.org/W2564147261","https://openalex.org/W2576019974","https://openalex.org/W2642628527","https://openalex.org/W2700774434","https://openalex.org/W2768805105","https://openalex.org/W2775907401","https://openalex.org/W2863550520","https://openalex.org/W2904250082","https://openalex.org/W3023540311","https://openalex.org/W3168177696","https://openalex.org/W4241467181","https://openalex.org/W4242876994","https://openalex.org/W6600018615","https://openalex.org/W6605577574"],"related_works":["https://openalex.org/W2863550520","https://openalex.org/W2280739905","https://openalex.org/W2765865206","https://openalex.org/W2103478379","https://openalex.org/W1993227020","https://openalex.org/W2924261345","https://openalex.org/W1903862285","https://openalex.org/W3005536857","https://openalex.org/W2288307203","https://openalex.org/W1967490545"],"abstract_inverted_index":{"Today\u2019s":[0],"cloud":[1,27,97],"providers":[2,28],"strive":[3],"to":[4,29,61,63,94,136,151],"attract":[5],"customers":[6],"with":[7,56,81,149],"better":[8],"services":[9],"and":[10,99,112,130],"less":[11],"downtime":[12],"in":[13,49,120,164],"a":[14,43,86],"highly":[15],"competitive":[16],"market.":[17],"The":[18],"need":[19],"for":[20,36],"minimizing":[21],"the":[22,45,57,65,82,96,107,126,146,155,159],"operational":[23],"cost":[24],"unavoidably":[25],"leads":[26],"rely":[30],"on":[31],"third":[32,51],"party":[33,52],"remote":[34,53,75,87,118],"administrators":[35,54,119],"fulfilling":[37],"regular":[38],"maintenance":[39,66,127],"tasks.":[40],"In":[41,102],"such":[42,114,142],"scenario,":[44],"lack":[46],"of":[47,85,117,161],"trust":[48],"those":[50],"paired":[55],"extra":[58],"privileges":[59],"granted":[60],"them":[62],"complete":[64],"tasks":[67],"usually":[68],"implies":[69],"undesirable":[70],"security":[71,133],"threats.":[72],"A":[73],"dishonest":[74],"administrator,":[76,88],"or":[77],"an":[78],"attacker":[79],"armed":[80],"stolen":[83],"credential":[84],"can":[89],"pose":[90],"severe":[91],"insider":[92,115],"threats":[93,116],"both":[95],"provider":[98],"its":[100],"tenants.":[101],"this":[103],"paper,":[104],"we":[105,123],"take":[106],"first":[108,124],"step":[109],"towards":[110],"understanding":[111],"mitigating":[113],"clouds.":[121],"Specifically,":[122],"model":[125],"task":[128,147],"assignments":[129,148],"their":[131],"corresponding":[132],"impact":[134,143],"due":[135],"privilege":[137],"escalation.":[138],"We":[139],"then":[140],"mitigate":[141],"through":[144],"optimizing":[145],"respect":[150],"given":[152],"constraints.":[153],"Finally,":[154],"simulation":[156],"results":[157],"demonstrate":[158],"effectiveness":[160],"our":[162],"solution":[163],"various":[165],"scenarios.":[166]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2019-06-27T00:00:00"}