Improved Decision Diagrams for Security Policy Evaluation and Management

Luo Xiaofeng; Luo Wanbo

您当前的位置：

首页 >

文章列表页 >

Improved Decision Diagrams for Security Policy Evaluation and Management

更新时间：2023-11-14

- Improved Decision Diagrams for Security Policy Evaluation and Management
- Advanced Engineering Sciences Vol. 48, Issue 4, Pages: 123-128(2016)
- 作者机构：
  
  四川大学
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2016，
  
  Published Online：20 May 2016，
扫描看全文
罗霄峰,罗万伯.改进的安全策略评价管理决策图[J].工程科学与技术,2016,48(4):123-128.

Luo Xiaofeng, Luo Wanbo. Improved Decision Diagrams for Security Policy Evaluation and Management. [J]. Advanced Engineering Sciences 48(4):123-128(2016)
罗霄峰,罗万伯.改进的安全策略评价管理决策图[J].工程科学与技术,2016,48(4):123-128. DOI：

Luo Xiaofeng, Luo Wanbo. Improved Decision Diagrams for Security Policy Evaluation and Management. [J]. Advanced Engineering Sciences 48(4):123-128(2016) DOI：

摘要

中文摘要: 针对Canh Ngo等为安全策略评价和管理所提出的MIDD和X-MIDD方法的不足，本文从一般ABAC模型出发，对其进行了改进。设计了新的图结构iMIDD和iX-MIDD，新图的边用上结点变量值范围（简约的区间划分）及状态组成的元组表示，可更好地标注在决策中有关键作用的重要属性，有利于决策过程中更精细化处理。iX-MIDD的决策-叶结点也做了扩展，增加了组合算法信息，便于在对访问请求进行决策时使用。给出了应用本文方法进行策略元素匹配、策略评估，以及从iMIDD生成iX-MIDD的流程。复杂度分析及仿真实验表明，本文方法的时间、空间复杂度和性能均与MIDD方法相当。新方法完全能用于策略管理的多种应用。

Abstract

Abstract:In order to overcome the shortcomings of MIDDs approach proposed by Canh Ngo et al

some improvements are proposed. New graph structures which edge is a tuple of node-variable reduced interval partition and the state value marking critical attribute were designed for the improved MIDDs and X-MIDDs

named iMIDDs and iX-MIDDs respectively. In addition

the combining-algorithm identifier is also added to iX-MIDDs decision-leaf nodes. Operations and processing of policy elements match

policy evaluation

and iMIDD to iX-MIDD transformation are introduced. Complexities analysis and simulation show both space and evaluation time complexities of proposed approach are equivalent to the MIDDs’. New approach could be applied in various policy management problems.

关键词

访问控制决策图安全策略策略管理XACML

Keywords

access controldecision diagramssecurity policypolicy managementXACML

references

更多指标>

Views

1479

下载量

CNKI被引量

Alert me when the article has been cited

提交

Tools

Publicity Resources

Access Control Model Based on the Security Evaluation of Subject and Object

Study on the Security Policy Management Frameworkin Multi-domain Environment

Related Author

No data

Related Institution

四川大学计算机学院四川

Univ. of Maryland Biotechnology InstituteMD 20886US

南京航空航天大学信息科学与技术学院江苏

南京航空航天大学信息科学与技术学院江苏南京 2100162.南京大学计算机软件新技术国家重点实验室江苏

四川大学信息安全研究所

⁰