유연한 속성 기반의 역할기반 접근제어 모델
A Flexible Attribute-based RBAC Model
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
이 논문에서 우리는 유연한 속성을 기반으로 하는 FA-RBAC(FA-RBAC)모델을 제안한다. 이 모델은 속성-역할 중심으로 할당하여 객체 관리가 용이하고 그만큼 접근제어의 효율성이 높으며 네트워크 환경이 변함에 따라 유연한 접근제어를 제공할 수 있다. 또한, RBAC 모델과 ABAC 모델의 장단점을 균형 있게 조정하면서 세분화된 권한과 간단한 액세스 제어가 가능하고 실현할 수있고, 각 역할과 속성 간의 할당 관계를 정적 속성기반 역할과 동적 속성기반 규칙을 결합하여접근제어 규칙의 수를 줄임으로써 시스템 오버헤드를 줄이고, 비교 분석 및 시뮬레이션을 통해제안 모델의 타당성 및 성능 이점을 검증한다.
Abstract
In this paper, we propose an FA-RBAC (FA-RBAC) model based on flexible properties. This model is assigned attribute-role-centric, making it easy to manage objects, as efficient as access control, and as the network environment changes, it can provide flexible access control. In addition, fine-grained permissions and simple access control can be achieved while balancing the advantages and disadvantages of the RBAC and ABAC models, reducing the number of access control rules by combining static attribute-based roles and dynamic attribute-based rules, and verifying the validity and performance benefits of the proposed model through comparison analysis and simulation.
참고문헌 (17)
- Ravi S StAndhu, "Role-based Access Control Model", IEEE, pp.38~47 (1996)
- Ezedin Barka, "Framework for Role-based Delegation Model and Some Extensions", Proceedings of the 23rd NIST-NCSC National Information Systems Security Conference, pp.101~114 (2000)
- Ravi Sandhu, "Role activation hierarchies", RBAC '98: Proceedings of the third ACM workshop on Role-based access control, pp.33~40 (1998)
- Zhang L, "A Rule-based Framework for Role-based Delegation Revocation", ACM TranStActions on Information and System Security, 6(3), pp.404~441 (2003)[DOI]
- X. Zhang, "An attribute-based access matrix model", Proceedings of the 2005 ACM Symposium on Applied Computing, pp.359~363 (2005)
- Jiwan Ninglekhu, "AARBAC: Attribute-Based Administration of Role-Based Access Control", 2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC) (2017), IEEE
- Yan Xuexiong, "A Multiple Hierarchies RBAC Model", 2010 International Conference on Communications and Mobile Computing, pp.57~60 (2010)
- M. A. C. Dekker, "Extended privilege inheritance in RBAC", ASIACCS '07: Proceedings of the 2nd ACM symposium on Information, computer and communications security, pp.383~385 (2007)
- B. Malek, "Combining Attribute-Based and Access System", Proceedings of the 12th IEEE International Conference on Computational Science and Engineering, pp.305~312 (2009)
- Tahmina Ahmed, "Classifying and Comparing Attribute-Based and Relationship-Based Access Control", Conference: the Seventh ACM (2017)
- S. Oh, "Task-role-based Access Control Model", Information System, 28, pp.533~562 (2003)[DOI]
- Yingying Yu, "Task-role based access control model in logistics management system", Proceedings of 2013 IEEE International Conference on Service Operations and Logistics, and Informatics, pp.130~135 (2013)
- E. Bertino, "TRBAC: A Temporal Role-Based Access Control Model", ACM Transactions on Information and System Security, 4(3), pp.191~223 (2001)[DOI]
- J. Park, "Towrads usage control models: beyond traditional access control", Proceeding of the 7th ACM Symposium on Access Control Models and Technologies (SACMAT’ 02), pp.57~64 (2002)
- Matthew W Sanders, "Mining least privilege attribute based access control policies", JACSAC '19: Proceedings of the 35th Annual Computer Security Applications Conference, pp.404~416 (2019)
- D. R. Kuhn, "Adding attributes to role-based access control", Computer, 6, pp.79~81 (2010)[DOI]
- Bernhard J. Berger, "Towards Effective Verification of Multi-Model Access Control Properties", Proceedings of the 24th ACM Symposium on Access Control Models and Technologies, pp.149~160 (2019)