A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation
dc.contributor.author | Komlenovic, Marko | |
dc.date.accessioned | 2011-01-19T16:48:27Z | |
dc.date.available | 2011-01-19T16:48:27Z | |
dc.date.issued | 2011-01-19T16:48:27Z | |
dc.date.submitted | 2011-01-14 | |
dc.description.abstract | We consider the distributed access enforcement problem for Role-Based Access Control (RBAC) systems. Such enforcement has become important with RBAC's increasing adoption, and the proliferation of data that needs to be protected. We provide a platform for assessing candidates for access enforcement in a distributed architecture for enforcement. The platform provides the ability to encode data structures and algorithms for enforcement, and to measure time-, space- and administrative efficiency. To validate our platform, we use it to compare the state of the art in enforcement, CPOL [6], with two other approaches, the directed graph and the access matrix [9, 10]. We consider encodings of RBAC sessions in each, and propose and justify a benchmark for the assessment. We conclude with the somewhat surprising observation that CPOL is not necessarily the most efficient approach for access enforcement in distributed RBAC deployments. | en |
dc.identifier.uri | http://hdl.handle.net/10012/5731 | |
dc.language.iso | en | en |
dc.pending | false | en |
dc.publisher | University of Waterloo | en |
dc.subject | Role Based Access Control | en |
dc.subject | Distributed Access Enforcement in RBAC | en |
dc.subject | RBAC | en |
dc.subject | CPOL | en |
dc.subject | Access Matrix | en |
dc.subject | Directed Graph | en |
dc.subject | Reference monitor | en |
dc.subject | Access control policy | en |
dc.subject.program | Electrical and Computer Engineering | en |
dc.title | A Platform for Assessing the Efficiency of Distributed Access Enforcement in Role Based Access Control (RBAC) and its Validation | en |
dc.type | Master Thesis | en |
uws-etd.degree | Master of Applied Science | en |
uws-etd.degree.department | Electrical and Computer Engineering | en |
uws.peerReviewStatus | Unreviewed | en |
uws.scholarLevel | Graduate | en |
uws.typeOfResource | Text | en |