Statistics & clustering based framework for efficient XACML policy evaluation

Proceedings - 2009 IEEE International Symposium on Policies for Distributed Systems and Networks, POLICY 2009

Volumn , Issue , 2009, Pages 118-125

  Marouf, Said ^a   Shehab, Mohamed ^a   Squicciarini, Anna ^b   Sundareswaran, Smitha ^b  

^a University of North Carolina at Charlotte   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Policy categorization; Policy evaluation; XACML

Indexed keywords

ACCESS CONTROL POLICIES; ADAPTIVE APPROACH; CLUSTERING TECHNIQUES; CLUSTERING-BASED FRAMEWORK; ORDERS OF MAGNITUDE; POLICY CATEGORIZATION; POLICY EVALUATION; XACML; XACML POLICIES;

ACCESS CONTROL;

EID: 71049192853     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2009.36     Document Type: Conference Paper

References (13)

1. Q. Dong, S. Banerjee, J. Wang, D. Agrawal, and A. Shukla. Packet classifiers in ternary cams can be smaller. SIGMETRICS Perform. Eval. Rev., 34(1):311-322, 2006.
2. D. el Diehn I. Abou-Tair, S. Berlik, and U. Kelter. Enforcing privacy by means of an ontology driven xacml framework. In IAS '07: Proceedings of the Third International Symposium on Information Assurance and Security, pages 279-284, Washington, DC, USA, 2007. IEEE Computer Society.
3. H. Hamed and E. Al-Shaer. Dynamic rule-ordering optimization for high-speed firewall filtering. In Proceedings of the 2006 ACM Symposium on Information, computer and communications security, pages 332-342, New York, NY, USA, 2006. ACM.
4. H. Hamed, A. El-Atawy, and E. Al-Shaer. Adaptive statistical optimization techniques for firewall packet filtering. In INFOCOM 2006: Proceedings of the 25th IEEE International Conference on Computer Communications, pages 1-12, April 2006.
5. D. Lin, P. Rao, E. Bertino, and J. Lobo. An approach to evaluate policy similarity. In SACMAT '07: Proceedings of the 12th ACM symposium on Access control models and technologies, pages 1-10, New York, NY, USA, 2007. ACM.
6. A. X. Liu, F. Chen, J. Hwang, and T. Xie. Xengine: a fast and scalable xacml policy evaluation engine. In Proceedings of the ACM SIGMETRICS international conference on Measurement and modeling of computer systems, pages 265-276, New York, NY, USA, 2008. ACM.
7. P. Mazzoleni, B. Crispo, S. Sivasubramanian, and E. Bertino. Xacml policy integration algorithms. ACM Trans. Inf. Syst. Secur., 11(1), 2008.
8. P. L. Miseldine. Automated xacml policy reconfiguration for evaluation optimisation. In Proceedings of the 4th International Workshop on Software Engineering for Secure Systems, pages 1-8, New York, NY, USA, 2008. ACM.
9. T. Moses. Extensible access control markup language (XACML). Technical Report, OASIS, 2003.
10. R. Rivest. On self-organizing sequential search heuristics. Commun. ACM, 19(2):63-67, 1976.
11. S. Rizvi, A. Mendelzon, S. Sudarshan, and P. Roy. Extending query rewriting techniques for fine-grained access control. In Proceedings of the International Conference on Management of Data, pages 551-562, New York, NY, USA, 2004. ACM.
12. Sun Microsystems Inc, Sun XACML Policy Engine. http://sunxacml. sourceforge.net/guide.html.
13. I. H. Witten and E. Frank. Data Mining: Practical Machine Learning Tools and Techniques. 2 edition, 2005.