Using Gini Impurity to Mine Attribute-based Access Control Policies with Environment Attributes
Using Gini Impurity to Mine Attribute-based Access Control Policies with Environment Attributes
复制标题
使用基尼不纯度挖掘具有环境属性的基于属性的访问控制策略
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
V. Atluri
中科院分区：
文献类型：
--
作者：
Saptarshi Das;S. Sural;Jaideep Vaidya;V. Atluri
在基于属性的访问控制（ABAC）系统中，利用环境属性以及主题和对象属性为访问决策带来了动态性质。包含环境属性有助于实现更细粒度的访问控制。在本文中，我们提出了一种ABAC政策挖掘算法，该算法在制定规则时考虑了环境属性及其相关的价值。此外，我们使用Gini杂质制定规则。这有助于最大程度地减少生成策略中的规则数量。实验评估表明，我们的方法在实践中非常有效。
In Attribute-based Access Control (ABAC) systems, utilizing environment attributes along with the subject and object attributes introduces a dynamic nature to the access decisions. The inclusion of environment attributes helps in achieving a more fine-grained access control. In this paper, we present an ABAC policy mining algorithm that considers the environment attributes and their associated values while forming the rules. Furthermore, we use gini impurity to form the rules. This helps to minimize the number of rules in the generated policy. The experimental evaluation shows that our approach is quite effective in practice.