클라우드 환경에서 개체 속성 기반 접근제어 모델
An Entity Attribute-Based Access Control Model in Cloud Environment
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
클라우드 환경의 대규모 인프라 구조에서는 응용프로그램들과 디바이스의 공유로 인하여 불법적인 접근권한 문제가 빈번하게 발생하기 때문에 이러한 공격에 적극적으로 대응하기 위해서는 상황별로 대비가 가능한 강화된 접근통제 시스템이 요구된다. 우리는 대규모 인프라 환경에 기반한 보안등급과 릴레이션 개념의 개체 속성 기반 접근통제 모델을 제시하였다. 본 모델은 주체와 객체에 무결성과 기밀성 등급을 부여하고 동일한 역할에 대해 서로 다른 서비스가 가능한 강화된 접근제어 특성을 가지며, 서비스와 관련된 릴레이션과 상태정보인 컨텍스트에 의해 역할과 권한을 배정함으로써 권한 관리의 유연성을 갖는다. 또한, 대학이라는 대규모 인프라 구조를 갖는 다중 서비스 환경에 적용한 응용 사례를 통하여 본 모델의 적용 가능성을 제시하였다.
Abstract
In the large-scale infrastructure of cloud environment, illegal access rights are frequently caused by sharing applications and devices, so in order to actively respond to such attacks, a strengthened access control system is required to prepare for each situation. We proposed an entity attribute-based access control(EABAC) model based on security level and relation concept. This model has enhanced access control characteristics that give integrity and confidentiality to subjects and objects, and can provide different services to the same role. It has flexibility in authority management by assigning roles and rights to contexts, which are relations and context related to services. In addition, we have shown application cases of this model in multi service environment such as university.
참고문헌 (18)
- R. Aluvalu, "A Dynamic atttribute-based risk aware access control model(DA-RAAC) for cloud computing", IEEE International Conference on Computational Intelligence and Computing Research(ICCIC) (2016)
- G. Sala, "Security and Integrity of a Distributed File Storage in a Vitual Environment", Fourth Inernational IEEE Security In Storage Workshop, pp.58~69 (2007)
- G. Cheng, "A Prioritized Chinese Wall Model for Mananging the Covert Information Flows in Virtual Machine Systems", The 9th Inernational Conference for Young Computer Scienttists, pp.1481~1487 (2008)
- F. Sabdhi, "Cloud Computing Security Threates and Responses", Inernational Conference on Communication Software and Networks(ICCSN), pp.245~249 (2011)
- F. Sabdhi, "Virtualization-Lever Security in Cloud Computing", Inernational Conference on Communication Software and Networks(ICCSN), pp.250~254 (2011)
- T. Shinagawa, "Introducing Role-based Access Control to a Secure Virtual Machine Monitor :Security Policy Enforcement Mechanism for Distributed Computers", 2008 IEEE Asia-Pacific Services Computing Conference, pp.1225~1230 (2008)
- C. Musca, "Secure Aceess to Cloud Resource RBAC in Cloud System", 2013 Eighth International Conference on P2P, Parallel, Grid, Cloud and Internet Computing, pp.554~558 (2013)
- IEC 27001: 2013:Information Technology--Security Techniques--Information Security Management Systems--Requirements, "ISO", pp.2013, British Standards
- C. Pengrui, "Hierachical Access Control Model of Software Repository Based on RBAC", IEEE, pp.761~765 (2016)
- T. Win, "Virtualization Security Combining Mandatory Access Control and Virtual Machine Introspection", 2014 IEEE, 2014, 1004~1009
- Y. Sanches, "A Service-based RBAC & MAC approach incorporate into the FHIR standard", Digital Communications and Networks, 5, pp.214~225 (2019)[DOI]
- 최은복, "클라우드 융합을 위한 MAC 정책 기반 접근통제 메커니즘", 한국융합학회논문지, 7(1), pp.1~8 (2016), 한국융합학회[DOI]
- B. Taubmann, "CloudPhylactor : Harnessing Mandatory Access Control for Virtual Machine Introspection in Cloud Data Centers, 2016 IEEE TrustCom-BigDataSE-ISPA, 957-964", DOI : 10. 1109, 2016, pp.2016, 160~
- 최은복, "클라우드 컴퓨팅 환경에서 가상화 관리 융합접근제어 모델", 융합정보논문지, 8(5), pp.69~75 (2018), 중소기업융합학회[DOI]
- X. Ding, "An Access Control Model and Its Application in Blockchain, 2019International Conference on Communications", Information System and Computer Engineering (CISCE), pp.163~167 (2019)