An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment
Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particu...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2021-12-01
|
| Series: | Symmetry |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2073-8994/13/12/2394 |
| _version_ | 1797500287874760704 |
|---|---|
| author | Teo Poh Kuang Hamidah Ibrahim Fatimah Sidi Nur Izura Udzir Ali A. Alwan |
| author_facet | Teo Poh Kuang Hamidah Ibrahim Fatimah Sidi Nur Izura Udzir Ali A. Alwan |
| author_sort | Teo Poh Kuang |
| collection | DOAJ |
| description | Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particularly among organizations of a distributed environment. Existing policy evaluation engines employ a simple string equal matching function in evaluating the similarity between the attribute values of a request and a policy, which are inaccurate, since only exact match is considered similar. This work proposes several matching functions which are not limited to the string equal matching function that aim to resolve various types of naming heterogeneity. Our proposed solution is also capable of supporting symmetrical architecture applications, in which the organization can negotiate with the users for the release of their resources and properties that raise privacy concerns. The effectiveness of the proposed matching functions on real XACML policies, designed for universities, conference management, and the health care domain, is evaluated. The results show that the proposed solution has successfully achieved higher percentages of Recall and F-measure compared with the standard Sun’s XACML implementation, with our improvement, these measures gained up to 70% and 57%, respectively. |
| first_indexed | 2024-03-10T03:59:45Z |
| format | Article |
| id | doaj.art-364a137d9ee7461ebac8f02be3cbcc10 |
| institution | Directory Open Access Journal |
| issn | 2073-8994 |
| language | English |
| last_indexed | 2024-03-10T03:59:45Z |
| publishDate | 2021-12-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Symmetry |
| spelling | doaj.art-364a137d9ee7461ebac8f02be3cbcc102023-11-23T10:46:34ZengMDPI AGSymmetry2073-89942021-12-011312239410.3390/sym13122394An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed EnvironmentTeo Poh Kuang0Hamidah Ibrahim1Fatimah Sidi2Nur Izura Udzir3Ali A. Alwan4Faculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, MalaysiaFaculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, MalaysiaFaculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, MalaysiaFaculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, MalaysiaSchool of Theoretical & Applied Science, Ramapo College of New Jersey, Mahwah, NJ 07430, USAPolicy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particularly among organizations of a distributed environment. Existing policy evaluation engines employ a simple string equal matching function in evaluating the similarity between the attribute values of a request and a policy, which are inaccurate, since only exact match is considered similar. This work proposes several matching functions which are not limited to the string equal matching function that aim to resolve various types of naming heterogeneity. Our proposed solution is also capable of supporting symmetrical architecture applications, in which the organization can negotiate with the users for the release of their resources and properties that raise privacy concerns. The effectiveness of the proposed matching functions on real XACML policies, designed for universities, conference management, and the health care domain, is evaluated. The results show that the proposed solution has successfully achieved higher percentages of Recall and F-measure compared with the standard Sun’s XACML implementation, with our improvement, these measures gained up to 70% and 57%, respectively.https://www.mdpi.com/2073-8994/13/12/2394access control policiespolicy evaluationnaming heterogeneityXACML |
| spellingShingle | Teo Poh Kuang Hamidah Ibrahim Fatimah Sidi Nur Izura Udzir Ali A. Alwan An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment Symmetry access control policies policy evaluation naming heterogeneity XACML |
| title | An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment |
| title_full | An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment |
| title_fullStr | An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment |
| title_full_unstemmed | An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment |
| title_short | An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment |
| title_sort | effective naming heterogeneity resolution for xacml policy evaluation in a distributed environment |
| topic | access control policies policy evaluation naming heterogeneity XACML |
| url | https://www.mdpi.com/2073-8994/13/12/2394 |
| work_keys_str_mv | AT teopohkuang aneffectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT hamidahibrahim aneffectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT fatimahsidi aneffectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT nurizuraudzir aneffectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT aliaalwan aneffectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT teopohkuang effectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT hamidahibrahim effectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT fatimahsidi effectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT nurizuraudzir effectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment AT aliaalwan effectivenamingheterogeneityresolutionforxacmlpolicyevaluationinadistributedenvironment |