{"id":"https://openalex.org/W2952391640","doi":"https://doi.org/10.3233/jcs-191306","title":"Mitigating the insider threat of remote administrators in clouds through maintenance task assignments","display_name":"Mitigating the insider threat of remote administrators in clouds through maintenance task assignments","publication_year":2019,"publication_date":"2019-06-17","ids":{"openalex":"https://openalex.org/W2952391640","doi":"https://doi.org/10.3233/jcs-191306","mag":"2952391640"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-191306","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191306","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017266517","display_name":"Nawaf Alhebaishi","orcid":"https://orcid.org/0000-0003-0438-4243"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]},{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","SA","US"],"is_corresponding":true,"raw_author_name":"Nawaf Alhebaishi","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","Faculty of Computing and Information Technology, King Abdulaziz University, Jeddag, KSA","Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"Faculty of Computing and Information Technology, King Abdulaziz University, Jeddag, KSA","institution_ids":["https://openalex.org/I185163786"]},{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100730397","display_name":"Lingyu Wang","orcid":"https://orcid.org/0000-0002-7441-7541"},"institutions":[{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Lingyu Wang","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0,\u00a0","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering, Concordia University, Quebec, Canada. E-mails:\u00a0n_alheb@ciise.concordia.ca,\u00a0wang@ciise.concordia.ca","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010727123","display_name":"Sushil Jajodia","orcid":"https://orcid.org/0000-0003-3210-558X"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sushil Jajodia","raw_affiliation_strings":["Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0","Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0jajodia@gmu.edu"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0","institution_ids":["https://openalex.org/I162714631"]},{"raw_affiliation_string":"Center for Secure Information Systems, George Mason University, VA, USA. E-mail:\u00a0jajodia@gmu.edu","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088206056","display_name":"Anoop Singhal","orcid":"https://orcid.org/0000-0002-2602-3927"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anoop Singhal","raw_affiliation_strings":["Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0","Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0anoop.singhal@nist.gov"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0","institution_ids":["https://openalex.org/I1321296531"]},{"raw_affiliation_string":"Computer Security Division, National Institute of Standards and Technology, MD, USA. E-mail:\u00a0anoop.singhal@nist.gov","institution_ids":["https://openalex.org/I1321296531"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5017266517"],"corresponding_institution_ids":["https://openalex.org/I185163786","https://openalex.org/I4210148195","https://openalex.org/I60158472"],"apc_list":null,"apc_paid":null,"fwci":0.3526,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.67636882,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"27","issue":"4","first_page":"427","last_page":"458"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7738231420516968},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7681008577346802},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.7679435014724731},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.729218602180481},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6953121423721313},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6778237819671631},{"id":"https://openalex.org/keywords/downtime","display_name":"Downtime","score":0.6007605791091919},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.5802786350250244},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.4859065115451813},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.40971773862838745},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08119785785675049}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7738231420516968},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7681008577346802},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.7679435014724731},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.729218602180481},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6953121423721313},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6778237819671631},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.6007605791091919},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.5802786350250244},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.4859065115451813},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.40971773862838745},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08119785785675049},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jcs-191306","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-191306","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321588","display_name":"Concordia University","ror":"https://ror.org/0420zvk78"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":62,"referenced_works":["https://openalex.org/W153010205","https://openalex.org/W1489574895","https://openalex.org/W1504280683","https://openalex.org/W1504455947","https://openalex.org/W1512519626","https://openalex.org/W1540221906","https://openalex.org/W1588651819","https://openalex.org/W1918248053","https://openalex.org/W1984126335","https://openalex.org/W1985994373","https://openalex.org/W2009495439","https://openalex.org/W2012246208","https://openalex.org/W2013422737","https://openalex.org/W2013704995","https://openalex.org/W2017140356","https://openalex.org/W2022578767","https://openalex.org/W2031489231","https://openalex.org/W2033082111","https://openalex.org/W2052645878","https://openalex.org/W2054127354","https://openalex.org/W2065527711","https://openalex.org/W2077937403","https://openalex.org/W2091673436","https://openalex.org/W2099103357","https://openalex.org/W2100407515","https://openalex.org/W2103478379","https://openalex.org/W2109026747","https://openalex.org/W2116836841","https://openalex.org/W2121805588","https://openalex.org/W2126756319","https://openalex.org/W2131875370","https://openalex.org/W2140354620","https://openalex.org/W2143396794","https://openalex.org/W2150802402","https://openalex.org/W2151369956","https://openalex.org/W2158327591","https://openalex.org/W2161754059","https://openalex.org/W2162302744","https://openalex.org/W2166602595","https://openalex.org/W2196703670","https://openalex.org/W2290944024","https://openalex.org/W2396208531","https://openalex.org/W2400179508","https://openalex.org/W2417374831","https://openalex.org/W2488221070","https://openalex.org/W2561848028","https://openalex.org/W2563003400","https://openalex.org/W2564147261","https://openalex.org/W2576019974","https://openalex.org/W2642628527","https://openalex.org/W2700774434","https://openalex.org/W2768805105","https://openalex.org/W2775907401","https://openalex.org/W2863550520","https://openalex.org/W2904250082","https://openalex.org/W3023540311","https://openalex.org/W3141542896","https://openalex.org/W3168177696","https://openalex.org/W4241467181","https://openalex.org/W4242876994","https://openalex.org/W6600018615","https://openalex.org/W6605577574"],"related_works":["https://openalex.org/W2288307203","https://openalex.org/W4205304595","https://openalex.org/W1499596878","https://openalex.org/W2075012963","https://openalex.org/W2103478379","https://openalex.org/W3005536857","https://openalex.org/W3172588264","https://openalex.org/W2863550520","https://openalex.org/W38599750","https://openalex.org/W4377088378"],"abstract_inverted_index":{"Today\u2019s":[0],"cloud":[1,27,97],"providers":[2,28],"strive":[3],"to":[4,29,61,63,94,136,151],"attract":[5],"customers":[6],"with":[7,56,81,149],"better":[8],"services":[9],"and":[10,99,112,130],"less":[11],"downtime":[12],"in":[13,49,120,164],"a":[14,43,86],"highly":[15],"competitive":[16],"market.":[17],"The":[18],"need":[19],"for":[20,36],"minimizing":[21],"the":[22,45,57,65,82,96,107,126,146,155,159],"operational":[23],"cost":[24],"unavoidably":[25],"leads":[26],"rely":[30],"on":[31],"third":[32,51],"party":[33,52],"remote":[34,53,75,87,118],"administrators":[35,54,119],"fulfilling":[37],"regular":[38],"maintenance":[39,66,127],"tasks.":[40],"In":[41,102],"such":[42,114,142],"scenario,":[44],"lack":[46],"of":[47,85,117,161],"trust":[48],"those":[50],"paired":[55],"extra":[58],"privileges":[59],"granted":[60],"them":[62],"complete":[64],"tasks":[67],"usually":[68],"implies":[69],"undesirable":[70],"security":[71,133],"threats.":[72],"A":[73],"dishonest":[74],"administrator,":[76,88],"or":[77],"an":[78],"attacker":[79],"armed":[80],"stolen":[83],"credential":[84],"can":[89],"pose":[90],"severe":[91],"insider":[92,115],"threats":[93,116],"both":[95],"provider":[98],"its":[100],"tenants.":[101],"this":[103],"paper,":[104],"we":[105,123],"take":[106],"first":[108,124],"step":[109],"towards":[110],"understanding":[111],"mitigating":[113],"clouds.":[121],"Specifically,":[122],"model":[125],"task":[128,147],"assignments":[129,148],"their":[131],"corresponding":[132],"impact":[134,143],"due":[135],"privilege":[137],"escalation.":[138],"We":[139],"then":[140],"mitigate":[141],"through":[144],"optimizing":[145],"respect":[150],"given":[152],"constraints.":[153],"Finally,":[154],"simulation":[156],"results":[157],"demonstrate":[158],"effectiveness":[160],"our":[162],"solution":[163],"various":[165],"scenarios.":[166]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}