{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T20:54:06Z","timestamp":1782161646004,"version":"3.54.5"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032299208","type":"print"},{"value":"9783032299215","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-29921-5_27","type":"book-chapter","created":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T20:20:28Z","timestamp":1782159628000},"page":"397-412","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An Efficient User\u2013Kernel Access Control Scheme for\u00a0Lightweight Data Connectors"],"prefix":"10.1007","author":[{"given":"Mengxiang","family":"Zhu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenlong","family":"Kou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunchuan","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanru","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kui","family":"Geng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Liang","family":"Fang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,23]]},"reference":[{"key":"27_CR1","doi-asserted-by":"publisher","unstructured":"Abranches, M., Michel, O., Keller, E., Schmid, S.: Efficient network monitoring applications in the kernel with eBPF and XDP. In: 2021 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN), pp. 28\u201334 (2021). https:\/\/doi.org\/10.1109\/NFV-SDN53031.2021.9665095","DOI":"10.1109\/NFV-SDN53031.2021.9665095"},{"issue":"1","key":"27_CR2","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1145\/321623.321632","volume":"18","author":"AV Aho","year":"1971","unstructured":"Aho, A.V., Denning, P.J., Ullman, J.D.: Principles of optimal page replacement. J. ACM (JACM) 18(1), 80\u201393 (1971)","journal-title":"J. ACM (JACM)"},{"issue":"4","key":"27_CR3","doi-asserted-by":"publisher","first-page":"185","DOI":"10.3390\/a18040185","volume":"18","author":"M Alviano","year":"2025","unstructured":"Alviano, M., Sestito, P.: User armor: an extension for apparmor. Algorithms 18(4), 185 (2025)","journal-title":"Algorithms"},{"key":"27_CR4","doi-asserted-by":"crossref","unstructured":"Amitu, D.M., Akol, R.N., Serugunda, J.: Hybrid access control mechanism for massive machine type communications. Discov. Internet Things 5(1) (2025)","DOI":"10.1007\/s43926-025-00106-8"},{"key":"27_CR5","unstructured":"Beckmann, N., Chen, H., Cidon, A.: $$\\{$$LHD$$\\}$$: improving cache hit rate by maximizing hit density. In: 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18), pp. 389\u2013403 (2018)"},{"issue":"4","key":"27_CR6","doi-asserted-by":"publisher","first-page":"485","DOI":"10.1080\/15427951.2004.10129096","volume":"1","author":"A Broder","year":"2004","unstructured":"Broder, A., Mitzenmacher, M.: Network applications of bloom filters: a survey. Internet Math. 1(4), 485\u2013509 (2004)","journal-title":"Internet Math."},{"key":"27_CR7","unstructured":"Cao, L., Meng, L., Stefan, D., Fernandes, E.: Stateful least privilege authorization for the cloud. In: Proceedings of the 33rd USENIX Security Symposium, p. 195 (2024)"},{"key":"27_CR8","doi-asserted-by":"crossref","unstructured":"Chen, B., et al.: Sack: enabling environmental situation-aware access control for vehicles in Linux kernel. In: 2025 Design, Automation & Test in Europe Conference (DATE), pp.\u00a01\u20137 (2025)","DOI":"10.23919\/DATE64628.2025.10993252"},{"issue":"4","key":"27_CR9","doi-asserted-by":"publisher","first-page":"424","DOI":"10.1109\/TDSC.2015.2406705","volume":"13","author":"Y Cheng","year":"2016","unstructured":"Cheng, Y., Park, J., Sandhu, R.S.: An access control model for online social networks using user-to-user relationships. IEEE Trans. Dependable Secur. Comput. 13(4), 424\u2013436 (2016)","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"issue":"1","key":"27_CR10","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1016\/j.jalgor.2003.12.001","volume":"55","author":"G Cormode","year":"2005","unstructured":"Cormode, G., Muthukrishnan, S.: An improved data stream summary: the count-min sketch and its applications. J. Algorithms 55(1), 58\u201375 (2005)","journal-title":"J. Algorithms"},{"key":"27_CR11","doi-asserted-by":"crossref","unstructured":"Cotrini, C., Corinzia, L., Weghorn, T., Basin, D.: The next 700 policy miners: a universal method for building policy miners. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security (CCS), pp. 95\u2013112 (2019)","DOI":"10.1145\/3319535.3354196"},{"key":"27_CR12","doi-asserted-by":"publisher","first-page":"104644","DOI":"10.1016\/j.cose.2025.104644","volume":"158","author":"Q Deng","year":"2025","unstructured":"Deng, Q., Xu, Z., Zhou, Q., Zhang, Y.: Cordon: enhancing security through kernel-level control in containerized computing environments. Comput. Secur. 158, 104644 (2025)","journal-title":"Comput. Secur."},{"key":"27_CR13","doi-asserted-by":"crossref","unstructured":"Eiers, W., Sankaran, G., Li, A., O\u2019Mahony, E., Prince, B., Bultan, T.: Quantifying permissiveness of access control policies. In: 44th IEEE\/ACM 44th International Conference on Software Engineering, ICSE 2022, Pittsburgh, PA, USA, May 25\u201327, 2022, pp. 1805\u20131817. ACM (2022)","DOI":"10.1145\/3510003.3510233"},{"issue":"4","key":"27_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3149371","volume":"13","author":"G Einziger","year":"2017","unstructured":"Einziger, G., Friedman, R., Manes, B.: Tinylfu: a highly efficient cache admission policy. ACM Trans. Storage (ToS) 13(4), 1\u201331 (2017)","journal-title":"ACM Trans. Storage (ToS)"},{"key":"27_CR15","doi-asserted-by":"crossref","unstructured":"Jung, C., Kim, S., Jang, R., Mohaisen, D., Nyang, D.: A scalable and dynamic ACL system for in-network defense. In: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, pp. 1679\u20131693 (2022)","DOI":"10.1145\/3548606.3560606"},{"key":"27_CR16","doi-asserted-by":"crossref","unstructured":"Kim, J., Park, J., Lee, Y., Song, C., Kim, T., Lee, B.: Petal: ensuring access control integrity against data-only attacks on Linux. In: Proceedings of the 2024 ACM SIGSAC Conference on Computer and Communications Security, pp. 2919\u20132933 (2024)","DOI":"10.1145\/3658644.3690184"},{"key":"27_CR17","doi-asserted-by":"crossref","unstructured":"Li, F., Li, Z., Han, W., Wu, T., Chen, L., Guo, Y.: Cyberspace-oriented access control: model and policies. In: 2017 IEEE Second International Conference on Data Science in Cyberspace (DSC), pp. 261\u2013266 (2017)","DOI":"10.1109\/DSC.2017.100"},{"key":"27_CR18","unstructured":"Loscocco, P., Smalley, S.: Integrating flexible support for security policies into the Linux operating system. In: Proceedings of the USENIX ATC (2001)"},{"key":"27_CR19","unstructured":"Luo, Y., Shen, Q., Wu, Z.: PML: an interpreter-based access control policy language for web services. arXiv preprint arXiv:1903.09756 (2019)"},{"issue":"7","key":"27_CR20","doi-asserted-by":"publisher","first-page":"8481","DOI":"10.1109\/TIFS.2025.3592519","volume":"20","author":"Y Luo","year":"2025","unstructured":"Luo, Y., Shen, Q., Wu, Z.: Perm: streamlining cloud authorization with flexible and scalable policy enforcement. IEEE Trans. Inf. Forensics Secur. 20(7), 8481\u20138496 (2025)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"27_CR21","doi-asserted-by":"publisher","first-page":"323","DOI":"10.1007\/978-3-031-65175-5_23","volume-title":"ICT Systems Security and Privacy Protection","author":"G Madkaikar","year":"2024","unstructured":"Madkaikar, G., Sural, S., Vaidya, J., Atluri, V.: Queuing theoretic analysis of dynamic attribute-based access control systems. In: Pitropakis, N., Katsikas, S., Furnell, S., Markantonakis, K. (eds.) ICT Systems Security and Privacy Protection, pp. 323\u2013337. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-65175-5_23"},{"key":"27_CR22","unstructured":"Megiddo, N., Modha, D.S.: $$\\{$$ARC$$\\}$$: a $$\\{$$self-tuning$$\\}$$, low overhead replacement cache. In: USENIX Conference on File and Storage Technologies (2003)"},{"key":"27_CR23","unstructured":"Shen, B., Shan, T., Zhou, Y.: Improving logging to reduce permission over-granting mistakes. In: Proceedings of the 32nd USENIX Security Symposium, pp. 409\u2013426 (2023)"},{"issue":"4","key":"27_CR24","doi-asserted-by":"publisher","first-page":"2890","DOI":"10.1109\/JIOT.2019.2963794","volume":"7","author":"A Thakare","year":"2020","unstructured":"Thakare, A., Lee, E., Kumar, A., Nikam, V.B., Kim, Y.G.: PARBAC: priority-attribute-based RBAC model for azure IoT cloud. IEEE Internet Things J. 7(4), 2890\u20132900 (2020)","journal-title":"IEEE Internet Things J."},{"issue":"4","key":"27_CR25","doi-asserted-by":"publisher","first-page":"2012","DOI":"10.1109\/TDSC.2023.3299429","volume":"21","author":"HOS Varshith","year":"2024","unstructured":"Varshith, H.O.S., Sural, S., Vaidya, J., Atluri, V.: Efficiently supporting attribute-based access control in Linux. IEEE Trans. Dependable and Secure Comput. 21(4), 2012\u20132026 (2024)","journal-title":"IEEE Trans. Dependable and Secure Comput."},{"key":"27_CR26","doi-asserted-by":"crossref","unstructured":"Wang, H., et al.: Hidden and lost control: on security design risks in IoT user-facing matter controller. In: 32nd Annual Network and Distributed System Security Symposium, NDSS 2025, San Diego, California, USA, February 24\u201328, 2025. The Internet Society (2025)","DOI":"10.14722\/ndss.2025.240266"},{"key":"27_CR27","doi-asserted-by":"crossref","unstructured":"Wazan, A.S., et al.: Rootasrole: a security module to manage the administrative privileges for Linux. Comput. Secur. 102983 (2022)","DOI":"10.1016\/j.cose.2022.102983"},{"key":"27_CR28","doi-asserted-by":"publisher","first-page":"6168","DOI":"10.1109\/TIFS.2024.3411915","volume":"19","author":"S Xu","year":"2024","unstructured":"Xu, S., et al.: Condo: enhancing container isolation through kernel permission data protection. IEEE Trans. Inf. Forensics Secur. 19, 6168\u20136183 (2024)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"27_CR29","doi-asserted-by":"crossref","unstructured":"Yang, J., Zhang, Y., Qiu, Z., Yue, Y., Vinayak, R.: FIFO queues are all you need for cache eviction. In: Proceedings of the 29th Symposium on Operating Systems Principles, pp. 130\u2013149 (2023)","DOI":"10.1145\/3600006.3613147"},{"key":"27_CR30","unstructured":"Zhou, Y., Philbin, J., Li, K.: The multi-queue replacement algorithm for second level buffer caches. In: USENIX Annual Technical Conference, General Track, pp. 91\u2013104 (2001)"},{"key":"27_CR31","doi-asserted-by":"crossref","unstructured":"Zhu, S., Zhang, Y.: Probabilistic access policies with automated reasoning support. In: Proceedings of the International Conference Computer Aided Verification (CAV), pp. 443\u2013466 (2024)","DOI":"10.1007\/978-3-031-65633-0_20"}],"container-title":["Lecture Notes in Computer Science","Computational Science \u2013 ICCS 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-29921-5_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T20:20:35Z","timestamp":1782159635000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-29921-5_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032299208","9783032299215"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-29921-5_27","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"23 June 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Hamburg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Germany","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 June 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccs-computsci2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.iccs-meeting.org\/iccs2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}