Access Control Role Evolution Mechanism for Open Computing Environment

Access Control Role Evolution Mechanism for Open Computing Environment
复制标题

开放计算环境的访问控制角色演化机制

DOI:
10.3390/electronics9030517
复制
发表时间:
2020-03
期刊:
影响因子:
2.9
通讯作者:
Na Wang
Na Wang
中科院分区:
工程技术3区
文献类型:
--
作者:
Aodi Liu;Xuehui Du;Na Wang

文献摘要

参考文献

相似文献

开放计算环境中的数据资源(包括大数据、物联网和云计算)具有规模大、来源广、动态性强的特点。因此,开放计算环境中的用户-权限关系规模庞大,且会随着时间的推移而动态调整,这使得基于角色的访问控制(RBAC)模型中有效的权限管理成为一个具有挑战性的问题。在本文中,我们设计了一个开放计算环境中的访问控制角色的演化机制。该机制利用现有系统中的用户-权限关系挖掘访问控制角色,生成用户-角色和角色-权限关系。当用户-权限关系发生变化时,角色会不断调整和演化,为开放计算环境的访问控制提供角色支持。提出了一种新的基于遗传的角色进化算法,该算法可以有效地挖掘和优化角色,同时保持系统的核心权限。此外,提出了一种角色关系聚合算法,实现了角色的聚类,为安全管理员给出角色真实的语义信息提供了补充参考。真实数据集上的实验评估表明,所提出的机制是有效且可靠的。
Data resources in open computing environments (including big data, internet of things and cloud computing) are characterized by large scale, wide source, and strong dynamics. Therefore, the user-permission relationship of open computing environments has a huge scale and will be dynamically adjusted over time, which enables effective permission management in the role based access control (RBAC) model to become a challenging problem. In this paper, we design an evolution mechanism of access control roles for open computing environments. The mechanism utilizes the existing user-permission relationship in the current system to mine the access control role and generate the user-role and role-permission relationship. When the user-permission relationship changes, the roles are constantly tuned and evolved to provide role support for access control of open computing environments. We propose a novel genetic-based role evolution algorithm that can effectively mine and optimize roles while preserving the core permissions of the system. In addition, a role relationship aggregation algorithm is proposed to realize the clustering of roles, which provides a supplementary reference for the security administrator to give the role real semantic information. Experimental evaluations in real-world data sets show that the proposed mechanism is effective and reliable.
DOI: 10.1201/b10345-5
发表时间: 2010-11
期刊: Encyclopedia of Autism Spectrum Disorders
影响因子: --
作者:
Kim-Anh Lê Cao;Z. Welham
通讯作者: Kim-Anh Lê Cao;Z. Welham
DOI: 10.1007/978-3-642-13739-6_7
发表时间: 2010-06
期刊: --
影响因子: --
作者:
Jaideep Vaidya;V. Atluri;Qi Guo;Haibing Lu
通讯作者: Jaideep Vaidya;V. Atluri;Qi Guo;Haibing Lu
DOI: 10.1145/2871148
发表时间: 2016-05-01
影响因子: 16.6
作者:
Mitra, Barsha;Sural, Shamik;Atluri, Vijayalakshmi
通讯作者: Atluri, Vijayalakshmi
DOI: 10.1109/compsac.2017.195
发表时间: 2017-07
期刊: 2017 IEEE 41st Annual Computer Software and Applications Conference (COMPSAC)
影响因子: --
作者:
C. Blundo;S. Cimato;Luisa Siniscalchi
通讯作者: C. Blundo;S. Cimato;Luisa Siniscalchi
DOI: 10.1145/1805974.1805983
发表时间: 2010-07
期刊: ACM Trans. Inf. Syst. Secur.
影响因子: --
作者:
Jaideep Vaidya;V. Atluri;Qi Guo
通讯作者: Jaideep Vaidya;V. Atluri;Qi Guo