Data and applications security and privacy XXXII : 32nd Annual IFIP WG 11.3 Conference, DBSec 2018, Bergamo, Italy, July 16-18, 2018, Proceedings. Annual IFIP WG 11.3 Working Conference on Data and Applications Security (32nd : 2018 : B...最新文献

筛选

英文中文

Enabling the Deployment of ABAC Policies in RBAC Systems. 启用在RBAC系统中部署ABAC策略。

Data and applications security and privacy XXXII : 32nd Annual IFIP WG 11.3 Conference, DBSec 2018, Bergamo, Italy, July 16-18, 2018, Proceedings. Annual IFIP WG 11.3 Working Conference on Data and Applications Security (32nd : 2018 : B... Pub Date : 2018-07-01 Epub Date: 2018-07-10 DOI: 10.1007/978-3-319-95729-6_4

Gunjan Batra, Vijayalakshmi Atluri, Jaideep Vaidya, Shamik Sural

{"title":"Enabling the Deployment of ABAC Policies in RBAC Systems.","authors":"Gunjan Batra, Vijayalakshmi Atluri, Jaideep Vaidya, Shamik Sural","doi":"10.1007/978-3-319-95729-6_4","DOIUrl":"https://doi.org/10.1007/978-3-319-95729-6_4","url":null,"abstract":"<p><p>The flexibility, portability and identity-less access control features of Attribute Based Access Control (ABAC) make it an attractive choice to be employed in many application domains. However, commercially viable methods for implementation of ABAC do not exist while a vast majority of organizations use Role Based Access Control (RBAC) systems. In this paper, we present a way in which organizations having a RBAC system can deploy an ABAC policy. Thus, we propose a method for the translation of an ABAC policy into a form that can be adopted by an RBAC system. We compare the cost of enforcement in ABAC and RBAC with respect to time taken to evaluate an access request, and experimentally demonstrate that RBAC is significantly better in this respect. Since the cost of security management is more expensive under RBAC when compared to ABAC, we present an analysis of the different management costs and present mitigation approaches by considering various administrative operations.</p>","PeriodicalId":92500,"journal":{"name":"Data and applications security and privacy XXXII : 32nd Annual IFIP WG 11.3 Conference, DBSec 2018, Bergamo, Italy, July 16-18, 2018, Proceedings. Annual IFIP WG 11.3 Working Conference on Data and Applications Security (32nd : 2018 : B...","volume":"10980 ","pages":"51-68"},"PeriodicalIF":0.0,"publicationDate":"2018-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1007/978-3-319-95729-6_4","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"36903220","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Fully dynamic recognition algorithm and certificate for directed cographs 完全动态识别算法和证书的有向图

C. Crespelle, C. Paul

引用次数: 65