A Feasible Fuzzy-Extended Attribute-Based Access Control Technique

作者：Xu, Yang^*; Gao, Wuqiang; Zeng, Quanrun; Wang, Guojun; Ren, Ju; Zhang, Yaoxue

来源：Security and Communication Networks, 2018, 2018: UNSP 6476315.

DOI：10.1155/2018/6476315

• SECURITY
• SERVICES
• MODEL

Attribute-based access control (ABAC) is a maturing authorization technique with outstanding expressiveness and scalability, which shows its overwhelmingly competitive advantage, especially in complicated dynamic environments. Unfortunately, the absence of a flexible exceptional approval mechanism in ABAC impairs the resource usability and business time efficiency in current practice, which could limit its growth. In this paper, we propose a feasible fuzzy-extended ABAC (FBAC) technique to improve the flexibility in urgent exceptional authorizations and thereby improving the resource usability and business timeliness. We use the fuzzy assessment mechanism to evaluate the policy-matching degrees of the requests that do not comply with policies, so that the system can make special approval decisions accordingly to achieve unattended exceptional authorizations. We also designed an auxiliary credit mechanism accompanied by periodic credit adjustment auditing to regulate expediential authorizations for mitigating risks. Theoretical analyses and experimental evaluations show that the FBAC approach enhances resource immediacy and usability with controllable risk.

• 出版日期2018
• 单位中南大学; 广州大学