LES DERNIÈRES INFORMATIONS
Towards an Efficient Policy Evaluation Process in Multi-Tenancy Cloud Environments
Titre | Towards an Efficient Policy Evaluation Process in Multi-Tenancy Cloud Environments |
Publication Type | Conference Paper |
Year of Publication | 2016 |
Authors | Ayache, M, Erradi, M, Freisleben, B, Khoumsi, A |
Conference Name | CCSW'16: PROCEEDINGS OF THE 2016 ACM CLOUD COMPUTING SECURITY WORKSHOP |
Publisher | ACM SIGSAC; ACM |
ISBN Number | 978-1-4503-4572-9 |
Abstract | Cloud computing offers most of its services under multi-tenancy environments. To satisfy security requirements among collaborating tenants, each tenant may define a set of access control policies to secure access to shared data. Several cloud solutions make use of XACML to specify such policies. However, existing implementations of XACML perform a brute force search to compare a request to all existing rules in a given XACML policy. This decreases the decision process (i.e., policy evaluation) performance especially for policies with a large number of rules. In this paper, we propose an automata-based approach for an efficient XACML policy evaluation. We implemented our approach in a cloud policy engine called X2Automata. The engine first converts both XACML policies and access requests to automata. Second, it combines the two automata by a synchronous product. Third, it applies an evaluation procedure to the resulting automaton to decide whether an access request is granted or not. To highlight the efficiency of X2Automata, we compare its performance, based on the OpenStack cloud environment, with the XACML implementation named Balana.
|
DOI | 10.1145/2996429.2996431 |
Contactez-nous
ENSIAS
Avenue Mohammed Ben Abdallah Regragui, Madinat Al Irfane, BP 713, Agdal Rabat, Maroc
Télécopie : (+212) 5 37 68 60 78
Secrétariat de direction : 06 61 48 10 97
Secrétariat général : 06 61 34 09 27
Service des affaires financières : 06 61 44 76 79
Service des affaires estudiantines : 06 62 77 10 17 / n.mhirich@um5s.net.ma
Résidences : 06 61 82 89 77
Contacts
Compteur de visiteurs:543,030
Education - This is a contributing Drupal Theme
Design by
WeebPal.