Name
Abstract | ||
|---|---|---|
In order to facilitate managing authorization, access control architectures are designed to separate the business logic from an access control policy. To determine whether a user can access which resources, a request is formulated from a component, called a Policy Enforcement Point (PEP) located in application code. Given a request, a Policy Decision Point (PDP) evaluates the request against an access control policy and returns its access decision (i.e., permit or deny) to the PEP. With the growth of sensitive information for protection in an application, an access control policy consists of a larger number of rules, which often cause a performance bottleneck. To address this issue, we propose to refactor access control policies for performance improvement by splitting a policy (handled by a single PDP) into its corresponding multiple policies with a smaller number of rules (handled by multiple PDPs). We define seven attribute-set-based splitting criteria to facilitate splitting a policy. We have conducted an evaluation on three subjects of real-life Java systems, each of which interacts with access control policies. Our evaluation results show that (1) our approach preserves the initial architectural model in terms of interaction between the business logic and its corresponding rules in a policy, and (2) our approach enables to substantially reduce request evaluation time for most splitting criteria. |
Year | DOI | Venue |
|---|---|---|
2012 | 10.1145/2188286.2188346 | international conference on performance engineering |
Keywords | DocType | Citations |
performance improvement,corresponding multiple policy,access decision,attribute-set-based splitting criterion,evaluation result,business logic,policy decision point,access control architecture,refactoring access control policy,splitting criterion,access control policy,request evaluation time,access control,refactoring,performance | Conference | 10 |
PageRank | References | Authors |
0.56 | 12 | 5 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Donia El Kateb | 1 | 44 | 4.81 |
| Tejeddine Mouelhi | 2 | 263 | 14.93 |
| Yves Le Traon | 3 | 3922 | 190.39 |
| JeeHyun Hwang | 4 | 116 | 8.03 |
| Tao Xie | 5 | 5978 | 304.97 |