{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:23:45Z","timestamp":1750220625404,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":65,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Natural Sciences and Engineering Research Council (NSERC)"},{"name":"Ontario Graduate Scholarship (OGS)"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417860","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T16:21:21Z","timestamp":1614874881000},"page":"1533-1550","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Forensic Analysis in Access Control"],"prefix":"10.1145","author":[{"given":"Nahid","family":"Juma","sequence":"first","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaowei","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mahesh","family":"Tripunitara","sequence":"additional","affiliation":[{"name":"University of Waterloo, Waterloo, ON, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"volume-title":"Streaming Provenance Compression. In International Provenance and Annotation Workshop. Springer, 236--240","year":"2018","author":"Ahmad Raza","key":"e_1_3_2_2_1_1"},{"key":"e_1_3_2_2_2_1","unstructured":"Amazon Web Services (AWS). 2020a. Amazon CloudWatch -- Observability of your AWS resources and applications on AWS and on-premises. https:\/\/aws.amazon.com\/cloudwatch\/. Accessed: 2020-04--14.  Amazon Web Services (AWS). 2020a. Amazon CloudWatch -- Observability of your AWS resources and applications on AWS and on-premises. https:\/\/aws.amazon.com\/cloudwatch\/. Accessed: 2020-04--14."},{"key":"e_1_3_2_2_3_1","unstructured":"Amazon Web Services (AWS). 2020b. Amazon EC2 -- Secure and resizable compute capacity in the cloud. https:\/\/aws.amazon.com\/ec2\/. Accessed: 2020-04--15.  Amazon Web Services (AWS). 2020b. Amazon EC2 -- Secure and resizable compute capacity in the cloud. https:\/\/aws.amazon.com\/ec2\/. Accessed: 2020-04--15."},{"key":"e_1_3_2_2_4_1","unstructured":"Amazon Web Services (AWS). 2020c. Amazon S3 -- Object storage built to store and retrieve any amount of data from anywhere. https:\/\/aws.amazon.com\/s3\/. Accessed: 2020-04--14.  Amazon Web Services (AWS). 2020c. Amazon S3 -- Object storage built to store and retrieve any amount of data from anywhere. https:\/\/aws.amazon.com\/s3\/. Accessed: 2020-04--14."},{"key":"e_1_3_2_2_5_1","unstructured":"Amazon Web Services (AWS). 2020d. AWS CloudTrail -- User Guide. https:\/\/docs.aws.amazon.com\/awscloudtrail\/latest\/userguide\/cloudtrail-user-guide.html . Accessed: 2020-04--14.  Amazon Web Services (AWS). 2020d. AWS CloudTrail -- User Guide. https:\/\/docs.aws.amazon.com\/awscloudtrail\/latest\/userguide\/cloudtrail-user-guide.html . Accessed: 2020-04--14."},{"key":"e_1_3_2_2_6_1","unstructured":"Amazon Web Services (AWS). 2020e. AWS Identity and Access Management (IAM) -- Securely manage access to AWS services and resources. https:\/\/aws.amazon.com\/iam\/. Accessed: 2020-04--15.  Amazon Web Services (AWS). 2020e. AWS Identity and Access Management (IAM) -- Securely manage access to AWS services and resources. https:\/\/aws.amazon.com\/iam\/. Accessed: 2020-04--15."},{"key":"e_1_3_2_2_7_1","unstructured":"Amazon Web Services (AWS). 2020 f. AWS Lambda -- Run code without thinking about servers. Pay only for the compute time you consume. https:\/\/aws.amazon.com\/lambda\/. Accessed: 2020-04--14.  Amazon Web Services (AWS). 2020 f. AWS Lambda -- Run code without thinking about servers. Pay only for the compute time you consume. https:\/\/aws.amazon.com\/lambda\/. Accessed: 2020-04--14."},{"volume-title":"Serverless -- Build and run applications without thinking about servers. Last accessed","year":"2020","author":"Amazon Web","key":"e_1_3_2_2_8_1"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1991.130777"},{"key":"e_1_3_2_2_11_1","volume-title":"Security Engineering: A Guide to Building Dependable Distributed Systems","author":"Anderson Ross J.","year":"2008","edition":"2"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511804090"},{"volume-title":"Amazon Web Services. Last accessed","year":"2020","key":"e_1_3_2_2_13_1"},{"volume-title":"Kevin RB Butler, and Thomas Moyer","year":"2015","author":"Bates Adam","key":"e_1_3_2_2_14_1"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062180"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/PADSW.2018.8645035"},{"key":"e_1_3_2_2_17_1","unstructured":"Matt Bishop Christopher Wee and Jeremy Frank. 1996. Goal-oriented auditing and logging.  Matt Bishop Christopher Wee and Jeremy Frank. 1996. Goal-oriented auditing and logging."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502679"},{"key":"e_1_3_2_2_19_1","first-page":"2003","article-title":"Defining Digital Forensic Examination and Analysis Tools Using Abstraction Layers","volume":"1","author":"Carrier Brian","year":"2002","journal-title":"International Journal of Digital Evidence"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3035918.3035926"},{"key":"e_1_3_2_2_22_1","unstructured":"CloudSploit. 2019. A Technical Analysis of the Capital One Hack. https:\/\/blog.cloudsploit.com\/a-technical-analysis-of-the-capital-one-hack-a9b43d7c8aea. Accessed: 2020-04--21.  CloudSploit. 2019. A Technical Analysis of the Capital One Hack. https:\/\/blog.cloudsploit.com\/a-technical-analysis-of-the-capital-one-hack-a9b43d7c8aea. Accessed: 2020-04--21."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1987.232894"},{"volume-title":"Stoller","year":"2009","author":"Gofman Mikhail I.","key":"e_1_3_2_2_24_1"},{"volume-title":"Proceedings of the May 16--18, 1972, Spring Joint Computer Conference (AFIPS '72 (Spring)). ACM","author":"Scott Graham G.","key":"e_1_3_2_2_25_1"},{"volume-title":"Monotonic protection systems. Foundations of Secure Computation","year":"1978","author":"Harrison Michael A","key":"e_1_3_2_2_26_1"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/360303.360333"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23141"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"volume-title":"et almbox","year":"2018","author":"Hossain Md Nahid","key":"e_1_3_2_2_30_1"},{"edition":"2","volume-title":"Logic in Computer Science: Modelling and Reasoning about Systems","author":"Huth Michael","key":"e_1_3_2_2_31_1"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2007.70225"},{"first-page":"21","volume-title":"SOSP History Day 2015 (SOSP '15)","author":"Lampson Butler","key":"e_1_3_2_2_33_1"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/775265.775268"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516731"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1066100.1066103"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1066100.1066103"},{"volume-title":"On Safety in Discretionary Access Control. IEEE Symposium on Security and Privacy (May","year":"2005","author":"Li Ninghui","key":"e_1_3_2_2_38_1"},{"volume-title":"Proceedings of the Ninth ACM Symposium on Access Control Models and Technologies (SACMAT '04)","author":"Li Ninghui","key":"e_1_3_2_2_39_1"},{"volume-title":"2003 Symposium on Security and Privacy","year":"2003","author":"Li Ninghui","key":"e_1_3_2_2_40_1"},{"volume-title":"Xiangyu Zhang, Gabriela Ciocarlie, Ashish Gehani, Vinod Yegneswaran, Dongyan Xu, and Somesh Jha.","year":"2018","author":"Ma Shiqing","key":"e_1_3_2_2_41_1"},{"volume-title":"Protracer: Towards Practical Provenance Tracing by Alternating Between Logging and Tainting.. In NDSS .","year":"2016","author":"Ma Shiqing","key":"e_1_3_2_2_42_1"},{"key":"e_1_3_2_2_43_1","unstructured":"John McKim. 2017. Announcing the Winners of the Inaugural ServerlessConf Architecture Competition. Available from https:\/\/read.acloud.guru\/announcing-the-winners-of-the-inaugural-serverlessconf-architecture-competition-1dce2db6da3 . A Cloud Guru (May 2017). Last accessed: April 2 2020.  John McKim. 2017. Announcing the Winners of the Inaugural ServerlessConf Architecture Competition. Available from https:\/\/read.acloud.guru\/announcing-the-winners-of-the-inaugural-serverlessconf-architecture-competition-1dce2db6da3 . A Cloud Guru (May 2017). Last accessed: April 2 2020."},{"volume-title":"Last accessed","year":"2020","author":"Technology Nordstrom","key":"e_1_3_2_2_44_1"},{"volume-title":"The top 10 security challenges of serverless architectures. ZDNet (Jan","year":"2018","author":"Osborne Charlie","key":"e_1_3_2_2_45_1"},{"key":"e_1_3_2_2_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2007.23"},{"key":"e_1_3_2_2_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/1146269.1146291"},{"volume-title":"A model of forensic analysis using goal-oriented logging","author":"Peisert Sean Philip","key":"e_1_3_2_2_48_1"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2613087.2613102"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/361011.361067"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/300830.317086"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/42282.42286"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1992.213266"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0022-0000(70)80006-X"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"crossref","unstructured":"J. Shahen J. Niu and M. V. Tripunitara. 2019. Cree: a Performant Tool for Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies. IEEE Transactions on Dependable and Secure Computing (2019). (early access).  J. Shahen J. Niu and M. V. Tripunitara. 2019. Cree: a Performant Tool for Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies. IEEE Transactions on Dependable and Secure Computing (2019). (early access).","DOI":"10.1109\/TDSC.2019.2949410"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"crossref","unstructured":"Shahen Jonathan. 2016. Automated Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies using Mohawk  Shahen Jonathan. 2016. Automated Safety Analysis of Administrative Temporal Role-Based Access Control (ATRBAC) Policies using Mohawk","DOI":"10.1145\/2752952.2752966"},{"key":"e_1_3_2_2_57_1","unstructured":"T. http:\/\/hdl.handle.net\/10012\/10644  T. http:\/\/hdl.handle.net\/10012\/10644"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301315"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243763"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2012.77"},{"key":"e_1_3_2_2_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295169"},{"key":"e_1_3_2_2_62_1","unstructured":"John R Vacca. 2005. Computer forensics: computer crime scene investigation .Charles River Media .  John R Vacca. 2005. Computer forensics: computer crime scene investigation .Charles River Media ."},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363191"},{"key":"e_1_3_2_2_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/2396761.2398511"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/2501986"},{"volume-title":"Ahmed Amer, Dan Feng, and Zhipeng Tan.","year":"2011","author":"Xie Yulai","key":"e_1_3_2_2_66_1"},{"key":"e_1_3_2_2_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978378"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Virtual Event USA","acronym":"CCS '20"},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417860","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417860","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:31Z","timestamp":1750197691000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417860"}},"subtitle":["Foundations and a Case-Study from Practice"],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":65,"alternative-id":["10.1145\/3372297.3417860","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417860","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}