Heterogeneity XACML policy evaluation engine

The first and foremost challenge in establishing a policy evaluation engine is the conflict-free distributed policy evaluation process that governs all the information and resource exchange in distributed environment. However, most of the researcher efforts in policy evaluation have been devoted to...

Full description

Bibliographic Details
Main Authors: Teo, Poh Kuang, Ibrahim, Hamidah, Udzir, Nur Izura, Sidi, Fatimah
Format: Conference or Workshop Item
Language:English
Published: The Society of Digital Information and Wireless Communications (SDIWC) 2014
Online Access:http://psasir.upm.edu.my/id/eprint/39295/1/39295.pdf
_version_ 1796973511839842304
author Teo, Poh Kuang
Ibrahim, Hamidah
Udzir, Nur Izura
Sidi, Fatimah
author_facet Teo, Poh Kuang
Ibrahim, Hamidah
Udzir, Nur Izura
Sidi, Fatimah
author_sort Teo, Poh Kuang
collection UPM
description The first and foremost challenge in establishing a policy evaluation engine is the conflict-free distributed policy evaluation process that governs all the information and resource exchange in distributed environment. However, most of the researcher efforts in policy evaluation have been devoted to the topic of efficiency. While efficiency is an important issue, the effectiveness of policy evaluation may be limited if the resulting systems are not implemented correctly. To tackle the effectiveness, we demonstrate that heterogeneity conflicts are among the issues that should be addressed in distributed policy evaluation. To the best of our knowledge, heterogeneity issue has not been taken into account by existing policy evaluation engines. Current policy evaluation engines only utilized simple string-based methods during the policy evaluation process. However, each organization manages its own vocabulary of policies to serve their particular authority principle concern. Thus, we cannot expect that policies belonging to different organizations are based on the same vocabulary. Therefore, unique name assumption is not able to solve heterogeneity issue. We proposed an effective heterogeneity XACML policy evaluation engine called HXPEngine to detect and resolve heterogeneity conflicts. The comparison with existing engines is conducted, and findings show that HXPEngine is more effective than the previous evaluation engine.
first_indexed 2024-03-06T08:43:44Z
format Conference or Workshop Item
id upm.eprints-39295
institution Universiti Putra Malaysia
language English
last_indexed 2024-03-06T08:43:44Z
publishDate 2014
publisher The Society of Digital Information and Wireless Communications (SDIWC)
record_format dspace
spelling upm.eprints-392952016-07-29T08:22:40Z http://psasir.upm.edu.my/id/eprint/39295/ Heterogeneity XACML policy evaluation engine Teo, Poh Kuang Ibrahim, Hamidah Udzir, Nur Izura Sidi, Fatimah The first and foremost challenge in establishing a policy evaluation engine is the conflict-free distributed policy evaluation process that governs all the information and resource exchange in distributed environment. However, most of the researcher efforts in policy evaluation have been devoted to the topic of efficiency. While efficiency is an important issue, the effectiveness of policy evaluation may be limited if the resulting systems are not implemented correctly. To tackle the effectiveness, we demonstrate that heterogeneity conflicts are among the issues that should be addressed in distributed policy evaluation. To the best of our knowledge, heterogeneity issue has not been taken into account by existing policy evaluation engines. Current policy evaluation engines only utilized simple string-based methods during the policy evaluation process. However, each organization manages its own vocabulary of policies to serve their particular authority principle concern. Thus, we cannot expect that policies belonging to different organizations are based on the same vocabulary. Therefore, unique name assumption is not able to solve heterogeneity issue. We proposed an effective heterogeneity XACML policy evaluation engine called HXPEngine to detect and resolve heterogeneity conflicts. The comparison with existing engines is conducted, and findings show that HXPEngine is more effective than the previous evaluation engine. The Society of Digital Information and Wireless Communications (SDIWC) 2014 Conference or Workshop Item NonPeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/39295/1/39295.pdf Teo, Poh Kuang and Ibrahim, Hamidah and Udzir, Nur Izura and Sidi, Fatimah (2014) Heterogeneity XACML policy evaluation engine. In: Malaysian National Conference of Databases 2014 (MaNCoD 2014), 17 Sept. 2014, Universiti Putra Malaysia, Serdang, Selangor. (pp. 230-238). http://sdiwc.net/digital-library/download.php?id=00000504.pdf
spellingShingle Teo, Poh Kuang
Ibrahim, Hamidah
Udzir, Nur Izura
Sidi, Fatimah
Heterogeneity XACML policy evaluation engine
title Heterogeneity XACML policy evaluation engine
title_full Heterogeneity XACML policy evaluation engine
title_fullStr Heterogeneity XACML policy evaluation engine
title_full_unstemmed Heterogeneity XACML policy evaluation engine
title_short Heterogeneity XACML policy evaluation engine
title_sort heterogeneity xacml policy evaluation engine
url http://psasir.upm.edu.my/id/eprint/39295/1/39295.pdf
work_keys_str_mv AT teopohkuang heterogeneityxacmlpolicyevaluationengine
AT ibrahimhamidah heterogeneityxacmlpolicyevaluationengine
AT udzirnurizura heterogeneityxacmlpolicyevaluationengine
AT sidifatimah heterogeneityxacmlpolicyevaluationengine