Access resolution in Attribute-based Access Control (ABAC) is primarily through the enforcement of an ABAC policy. However, incremental user-specific authorizations are also often added to supplement the attribute-based accesses. As this auxiliary list of authorizations grows, enforcement becomes increasingly more inefficient, since both the ABAC policy and the specific authorizations are to be evaluated. Regenerating the ABAC policy from the auxiliary list, on the other hand, requires re-running the computationally expensive policy mining algorithms. Further, access mediation has to be put on hold while policy rebuilding is done, resulting in periods of unavailability of the system. In this paper, we look into the problem of balancing access request resolution, accommodating dynamic authorization updates, and ABAC policy rebuilding. We employ a queuing theoretic approach where the access mediation process is modeled as an M/G/1 queue with vacation. The server is primarily involved in resolving access requests, but occasionally goes on vacation to rebuild the ABAC policy. We study the effects of several parameters like request arrival rate, access resolution time, vacation duration and interval between vacations. Our extensive experiments provide a direction towards efficient implementation of ABAC.
{"title":"Queuing Theoretic Analysis of Dynamic Attribute-Based Access Control Systems.","authors":"Gaurav Madkaikar, Shamik Sural, Jaideep Vaidya, Vijayalakshmi Atluri","doi":"10.1007/978-3-031-65175-5_23","DOIUrl":"10.1007/978-3-031-65175-5_23","url":null,"abstract":"<p><p>Access resolution in Attribute-based Access Control (ABAC) is primarily through the enforcement of an ABAC policy. However, incremental user-specific authorizations are also often added to supplement the attribute-based accesses. As this auxiliary list of authorizations grows, enforcement becomes increasingly more inefficient, since both the ABAC policy and the specific authorizations are to be evaluated. Regenerating the ABAC policy from the auxiliary list, on the other hand, requires re-running the computationally expensive policy mining algorithms. Further, access mediation has to be put on hold while policy rebuilding is done, resulting in periods of unavailability of the system. In this paper, we look into the problem of balancing access request resolution, accommodating dynamic authorization updates, and ABAC policy rebuilding. We employ a queuing theoretic approach where the access mediation process is modeled as an M/G/1 queue with vacation. The server is primarily involved in resolving access requests, but occasionally goes on vacation to rebuild the ABAC policy. We study the effects of several parameters like request arrival rate, access resolution time, vacation duration and interval between vacations. Our extensive experiments provide a direction towards efficient implementation of ABAC.</p>","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"2024 ","pages":"323-337"},"PeriodicalIF":0.0,"publicationDate":"2024-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC11737519/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"143017657","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01DOI: 10.1007/978-3-031-28073-3
{"title":"Advances in Information and Communication: Proceedings of the 2023 Future of Information and Communication Conference (FICC), Volume 2","authors":"","doi":"10.1007/978-3-031-28073-3","DOIUrl":"https://doi.org/10.1007/978-3-031-28073-3","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"13 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"73621063","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2023-01-01DOI: 10.1007/978-3-031-28076-4
{"title":"Advances in Information and Communication: Proceedings of the 2023 Future of Information and Communication Conference (FICC), Volume 1","authors":"","doi":"10.1007/978-3-031-28076-4","DOIUrl":"https://doi.org/10.1007/978-3-031-28076-4","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"50 2","pages":""},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"72374833","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Hyperledger Fabric (HLF) is an open-source platform for deploying enterprise-level permissioned blockchains where users from multiple organizations can participate. Preventing unauthorized access to resources in such blockchains is of critical importance. Towards addressing this requirement, HLF supports different access control models. However, support for Attribute-Based Access Control (ABAC) in the current version of HLF is not comprehensive enough to address various requirements that arise when multiple organizations interact in an enterprise setting. To address those shortcomings, in this paper, we develop and present methods for providing full ABAC functionality in Hyperledger Fabric. Performance evaluation under different network configurations using the Hyperledger Caliper benchmarking tool shows that the proposed approach is quite efficient in practice.
{"title":"Towards Supporting Attribute-Based Access Control in Hyperledger Fabric Blockchain.","authors":"Amshumaan Pericherla, Proteet Paul, Shamik Sural, Jaideep Vaidya, Vijay Atluri","doi":"10.1007/978-3-031-06975-8_21","DOIUrl":"https://doi.org/10.1007/978-3-031-06975-8_21","url":null,"abstract":"<p><p>Hyperledger Fabric (HLF) is an open-source platform for deploying enterprise-level permissioned blockchains where users from multiple organizations can participate. Preventing unauthorized access to resources in such blockchains is of critical importance. Towards addressing this requirement, HLF supports different access control models. However, support for Attribute-Based Access Control (ABAC) in the current version of HLF is not comprehensive enough to address various requirements that arise when multiple organizations interact in an enterprise setting. To address those shortcomings, in this paper, we develop and present methods for providing full ABAC functionality in Hyperledger Fabric. Performance evaluation under different network configurations using the Hyperledger Caliper benchmarking tool shows that the proposed approach is quite efficient in practice.</p>","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"648 ","pages":"360-376"},"PeriodicalIF":0.0,"publicationDate":"2022-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9762829/pdf/nihms-1854529.pdf","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9921222","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_6
E. Tochev, H. Pfifer, S. Ratchev
{"title":"Indirect System Condition Monitoring Using Online Bayesian Changepoint Detection","authors":"E. Tochev, H. Pfifer, S. Ratchev","doi":"10.1007/978-3-030-72632-4_6","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_6","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"19 10","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50976065","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_27
Stelios Damalas, N. Neuhuber, P. Mörtl
{"title":"The Consideration of Job Satisfaction in the Design of Assistance Systems in Production","authors":"Stelios Damalas, N. Neuhuber, P. Mörtl","doi":"10.1007/978-3-030-72632-4_27","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_27","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"493 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50976475","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_3
M. Valori, V. Basile, S. Negri, Paolo Scalmati, C. Renghini, I. Fassi
{"title":"Towards the Automated Coverlay Assembly in FPCB Manufacturing: Concept and Preliminary Tests","authors":"M. Valori, V. Basile, S. Negri, Paolo Scalmati, C. Renghini, I. Fassi","doi":"10.1007/978-3-030-72632-4_3","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_3","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"48 11","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50976485","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_16
M. Kirschmann, J. Pierer, A. Steinecker, Philipp Schmid, Arne Erdmann
{"title":"Plenoptic Inspection System for Automatic Quality Control of MEMS and Microsystems","authors":"M. Kirschmann, J. Pierer, A. Steinecker, Philipp Schmid, Arne Erdmann","doi":"10.1007/978-3-030-72632-4_16","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_16","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"42 9","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50975995","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_5
Torge Kolditz, Caner-Veli Ince, A. Raatz
{"title":"Investigation on the Convergence of the Genetic Algorithm of an Aerodynamic Feeding System Due to the Enlargement of the Solution Space","authors":"Torge Kolditz, Caner-Veli Ince, A. Raatz","doi":"10.1007/978-3-030-72632-4_5","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_5","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"35 4","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50976036","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2021-01-01DOI: 10.1007/978-3-030-72632-4_8
G. Cheok, M. Franaszek, Karl Van Wyk, J. Marvel
{"title":"Improving Automated Insertion Task in Robotics by Reducing Registration Error","authors":"G. Cheok, M. Franaszek, Karl Van Wyk, J. Marvel","doi":"10.1007/978-3-030-72632-4_8","DOIUrl":"https://doi.org/10.1007/978-3-030-72632-4_8","url":null,"abstract":"","PeriodicalId":73328,"journal":{"name":"IFIP advances in information and communication technology","volume":"50 4","pages":""},"PeriodicalIF":0.0,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"50976110","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
扫码关注我们
求助内容：
应助结果提醒方式：
京公网安备 11010802042870号