HyPE: A Hybrid Approach toward Policy Engineering in Attribute-Based Access Control.
HyPE: A Hybrid Approach toward Policy Engineering in Attribute-Based Access Control.
复制标题
DOI：
10.1109/locs.2018.2889980
复制
发表时间：
2018-07-01
期刊：
影响因子：
--
通讯作者：
Atluri, Vijayalakshmi
中科院分区：
文献类型：
--
作者：
Das, Saptarshi;Sural, Shamik;Atluri, Vijayalakshmi
成功部署基于属性的访问控制需要策略工程过程，其中涉及构建一组适当的规则（称为策略）。策略工程可以通过自上而下的方法（可能会忽略组织中的一些现有访问）或自下而上的方法（可能形成与组织流程无关的规则）来执行。在这项工作中，我们提出了一种政策工程的混合方法，该方法解决了自上而下和自下而上方法的局限性，同时保留了各自的优势。
Successful deployment of attribute-based access control requires the process of policy engineering which involves constructing a set of appropriate rules, known as a policy. Policy engineering is performed either by a top-down approach that may ignore some of the existing accesses in the organization or a bottom-up approach that may form rules which are not relevant to the organizational processes. In this work, we propose a hybrid approach toward policy engineering that addresses the limitations of the top-down and the bottom-up approaches while preserving their individual advantages.