互操作性与自治性平衡的跨域访问控制策略映射  

Cross-domain access control policy mapping mechanism for balancing interoperability and autonomy

作　　者：诸天逸 李凤华[1,2] 金伟 郭云川[1,2] 房梁 成林[3] ZHU Tianyi;LI Fenghua;JIN Wei;GUO Yunchuan;FANG Liang;CHENG Lin(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China;China Information Technology Security Evaluation Center,Beijing 100085,China)

机构地区：[1]中国科学院信息工程研究所,北京100093 [2]中国科学院大学网络空间安全学院,北京100049 [3]中国信息安全测评中心,北京100085

出　　处：《通信学报》2020年第9期29-48,共20页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2016QY06X1203);国家自然科学基金资助项目(No.U1836203);中国科学院战略性先导科技专项基金资助项目(No.XDC02040400);山东省重点研发计划基金资助项目(No.2019JZZY020127)。

摘　　要：跨域访问控制虽然能提升互操作性,但也可降低域内自治性,因此如何平衡域间互操作性和域内自治性是一个重要的问题。针对该问题,提出一种基于多目标整数规划优化的跨域访问控制策略映射机制。在该机制中,将最大化域间互操作性和最小化域内自治性作为目标函数,将7类典型的跨域冲突作为约束函数,设计了一种带约束的NSGA-III优化算法。实验结果表明,在模拟现实机构特征的大中规模数据集上,该算法拥有较快收敛速度,且解集具有较高的准确性。Cross-domain access control can improves interoperability but reduces intra-domain autonomy.To balance inter-domain interoperability and intra-domain autonomy,a cross-domain access control policy mapping to the problem of multi-objective integer optimization programming was formulated.Both the maximization of inter-domain interoperability and the minimization of intra-domain autonomy were taken as the objectives.Further,seven constraints were designed to prevent typical cross-domain conflicts.To solve the optimization problem,a constrained NSGA-III algorithm was proposed.The experimental results show that the proposed algorithm can quickly converge and accurately find the policy mapping even in the large-scale datasets.

关 键 词：跨域访问控制 策略映射 互操作性 自治性损失 多目标优化 

分 类 号：TN929[电子电信—通信与信息系统]