计算机工程与设计2024,Vol.45Issue(10) :2914-2921.DOI:10.16208/j.issn1000-7024.2024.10.005

基于属性的访问控制策略混合生成方法

Hybrid attribute-based access control policy generation method

袁薇 田秀霞
计算机工程与设计2024,Vol.45Issue(10) :2914-2921.DOI:10.16208/j.issn1000-7024.2024.10.005

基于属性的访问控制策略混合生成方法

Hybrid attribute-based access control policy generation method

袁薇 1田秀霞1
扫码查看

作者信息

  • 1. 上海电力大学计算机科学与技术学院,上海 201306
  • 折叠

摘要

为解决目前基于属性的访问控制(ABAC)策略生成方法受限于关系提取问题的难度以及属性的质量和数量等问题,提出一种策略混合生成方法.利用自顶向下方法提取富语义的访问权限信息词语,无需提取词语关系减小问题难度;基于语义相似度优化实体属性,减少属性数量并提升质量,改进深度森林模型自底向上挖掘策略,提升高维度属性下的访问权限决策性能.实验结果表明,混合方法权限决策准确率最高可达98.11%,比直接的单一生成方法提高了 2.05%,且策略模型的挖掘时间缩短了 21.53%,是一种更加精准且高效的ABAC策略生成方法.

Abstract

To address the current limitations of attribute-based access control(ABAC)policy generation methods,which are hin-dered by difficulties in extracting relationship information between attributes,as well as issues related to the quality and quantity of attributes,a hybrid policy generation method was proposed.The top-down approach was utilized to extract rich semantic access permission information words,eliminating the need to extract word relationships and thereby reducing the difficulty of the problem.Entity properties were improved based on semantic similarity optimization to reduce attribute quantity and improve quality.The deep forest model was improved to mine policies from the bottom up and improve the performance of access permis-sion decision-making under high-dimensional attributes.Experimental results show that the accuracy of the hybrid method in access decision-making can reach 98.11%,which is 2.05%higher than that of the direct single-generation method,while the policy model mining time is reduced by 21.53%.The proposed hybrid method is a more accurate and efficient ABAC policy gene-ration method.

关键词

基于属性的访问控制/深度神经网络/词提取/属性优化/语义相似度/深度森林/信息安全

Key words

attribute-based access control/deep neural networks/word extraction/attribute optimization/semantic similarity/deep forest/information security

引用本文复制引用

基金项目

国家自然科学基金面上项目(61772327)

CCF-华为胡杨林基金-数据库专项基金项目(CCF-HuaweiDB202209)

国网甘肃省电力公司电力科学研究院横向基金项目(H2019-275)

上海市大数据管理系统工程研究中心开放课题基金项目(H2020-216)

出版年

2024
计算机工程与设计
中国航天科工集团二院706所

计算机工程与设计

CSTPCD北大核心
影响因子:0.617
ISSN:1000-7024
段落导航相关论文