一种云平台动态风险访问控制模型  

Cloud platform dynamic risk access control model

作　　者：杨宏宇[1] 宁宇光 YANG Hongyu;NING Yuguang(School of Computer Science and Technology,CivilAviationUniv.ofChina,Tianjin 300300,China)

机构地区：[1]中国民航大学计算机科学与技术学院,天津300300

出　　处：《西安电子科技大学学报》2018年第5期80-88,共9页Journal of Xidian University

基　　金：国家自然科学基金资助项目(60776807;61179045);国家科技重大专项资助项目(2012ZX03002002);中国民航科技基金资助项目(MHRD201009;MHRD201205)

摘　　要：针对风险访问控制模型无法动态匹配规则和风险值对访问请求灵敏度低的问题,提出一种云平台动态风险访问控制模型.首先通过事件推演机制改进基于属性的访问控制策略,构造动态规则匹配模块;然后设计动态分配风险评估指标权重子模块,构造对访问请求风险值有较高灵敏度的风险评估模块.仿真实验结果表明,云平台动态风险访问控制模型具有较好的有效性和可行性,并且与其他模型相比,具有较好的实时性和自适应性.As the risk access control model can not match rules dynamically and the risk values are insensitive to access requests,a cloud platform dynamiic risk access control miodcl(CDRAC)is proposed.First,the attribute based access control(ABCA)is improvedwith the event calculus(EC),and the dynamiic rule matching module is constructed in the CDRAC.Then,the dynamiic risk evaluation index weight distribution sub-module is designed,and the risk asscssmcntmiodulc with high sensitivity to access requests is constructed.Experimental results show that the CDRAChas good effectiveness and feasibility,and that it has a better real-time performance and adaptability than other existing models.

关 键 词：风险评估 访问控制 事件推演 云平台 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]