Title
Cloud service access control system based on ontologies.
Abstract
Cloud service is a new and distinctive business model for service providers. Access control is an emerging and challenging issue in supporting cloud service business. This work proposes a new access control mechanism called cloud service access control (CSAC). The CSAC mechanism considers payment status and service level as the two essential characteristics of cloud service. Ontology is a theoretical foundation for the CSAC mechanism. Inconsistent access control policies are detected by a set of proposed policy conflict analysis rules. Inappropriate user accesses are inhibited by access control policies according the proposed access denying rules. System architecture is designed to support the CSAC mechanism. A case study is provided to demonstrate how CSAC works. Finally, an evaluation is conducted to measure the concept explosion issue in CSAC.
Year
DOI
Venue
2014
10.1016/j.advengsoft.2013.12.006
Advances in Engineering Software
Keywords
Field
DocType
csac mechanism,cloud service,cloud service access control,new access control mechanism,cloud service business,access control policy,inappropriate user access,inconsistent access control policy,proposed access,access control,service level,ontology
Ontology (information science),Service level,Computer science,Computer security,Service provider,Access control,Business model,Systems architecture,Conflict analysis,Cloud computing
Journal
Volume
ISSN
Citations 
69
0965-9978
8
PageRank 
References 
Authors
0.48
19
1
Name
Order
Citations
PageRank
Chi-Lun Liu1376.76