Refactoring access control policies for performance improvement

ICPE'12 - Proceedings of the 3rd Joint WOSP/SIPEW International Conference on Performance Engineering

Volumn , Issue , 2012, Pages 323-334

  El Kateb, Donia ^a   Mouelhi, Tejeddine ^a   Le Traon, Yves ^a   Hwang, Jeehyun ^b   Xie, Tao ^b  

^a UNIVERSITY OF LUXEMBOURG   (Luxembourg)

^b North Carolina State University   (United States)

Author keywords

Access control; EXtensible access control markup language; Performance; Policy decision point; Policy enforcement point; Refactoring

Indexed keywords

EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; PERFORMANCE; POLICY DECISION POINTS; POLICY ENFORCEMENT; REFACTORINGS;

ENGINEERING; INDUSTRIAL ENGINEERING;

ACCESS CONTROL;

EID: 84861043720     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2188286.2188346     Document Type: Conference Paper

References (19)

1. IBM, Enterprise Privacy Authorization Language (EPAL), Version 1.2.s http://www.w3.org/Submission/2003/SUBMEPAL- 20031110, 2003.
2. OASIS eXtensible Access Control Markup Language (XACML). http://www.oasis-open.org/committees/xacml/2005.
3. Sun's XACML implementation. http://sunxacml.sourceforge.net/, 2005.
4. PolicySplitter Tool. http://www.mouelhi.com/policysplitter.html 2011.
5. G. Ammons, J. deok Choi, M. Gupta, and N. Swamy. Finding and removing performance bottlenecks in large systems. In Proceedings of European Conference on Object-Oriented Programming, pages 170-194, 2004.
6. E. D. Bell and J. L. La Padula. Secure computer system: Unified exposition and multics interpretation. MITRE Corporation, 1976.
7. D. F. Ferraiolo, R. S. Sandhu, S. I. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security, 4(3):224-274, 2001.
8. S. Jahid, C. A. Gunter, I. Hoque, and H. Okhravi. MyABDAC: Compiling XACML Policies for Attribute-Based Database Access Control. In Proceedings of the first ACM Conference on Data and Application Security and Privacy, pages 97-108, 2011.
9. A. A. E. Kalam, S. Benferhat, A. Miège, R. E. Baida, F. Cuppens, C. Saurel, P. Balbiani, Y. Deswarte, and G. Trouessin. Organization based access control. In Proceedings of 10th IEEE International Conference on Policies for Distributed Systems and Networks, pages 120-131, 2003.
10. B. Lampson. Protection. In Proceedings of the 5th Princeton Conference on Information Sciences and Systems, 1971.
11. Y. Le Traon, T. Mouelhi, A. Pretschner, and B. Baudry. Test-driven assessment of access control in legacy applications. In Proceedings of the 2008 International Conference on Software Testing, Verification, and Validation, pages 238-247, 2008.
12. D. Lin, P. Rao, E. Bertino, N. Li, and J. Lobo. Policy decomposition for collaborative access control. In Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, pages 103-112, 2008.
13. A. X. Liu, F. Chen, J. Hwang, and T. Xie. XEngine: A fast and scalable XACML policy evaluation engine. In Proceedings of International Conference on Measurement and Modeling of Computer Systems, pages 265-276, 2008.
14. S. Marouf, M. Shehab, A. Squicciarini, and S. Sundareswaran. Statistics clustering based framework for efficient XACML policy evaluation. In Proceedings of 10th IEEE International Conference on Policies for Distributed Systems and Networks, pages 118-125, 2009.
15. E. Martin, T. Xie, and T. Yu. Defining and measuring policy coverage in testing access control policies. In Proceedings of 8th International Conference on Information and Communications Security, pages 139-158, 2006.
16. P. L. Miseldine. Automated XACML policy reconfiguration for evaluation optimisation. In Proceedings of 4th International Workshop on Software Engineering for Secure Systems, pages 1-8, 2008.
17. T. Mouelhi, F. Fleurey, B. Baudry, and Y. Traon. A model-based framework for security policy specification, deployment and testing. In Proceedings of 11th International Conference on Model Driven Engineering Languages and Systems, pages 537-552, 2008.
18. T. Mouelhi, Y. L. Traon, and B. Baudry. Transforming and selecting functional test cases for security policy testing. In Proceedings of 2009 International Conference on Software Testing Verification and Validation, pages 171-180, 2009.
19. R. Yavatkar, D. Pendarakis, and R. Guerin. A framework for policy-based admission control. RFC Editor, 2000.