CAJ | 학술논문

在分布式计算环境下，传统基于属性的静态访问控制策略多存在扩展性差、难以实现等问题。针对上述问题，提出一种基于策略属性分解的冲突检测算法。该算法对策略属性进行分解，构造策略属性分解图，判断策略属性值之间的相交关系，根据静态策略冲突的定义进行策略冲突检测，从而提高策略冲突检测算法的可扩展性和易实现性。实验结果表明，该算法对静态策略冲突的检测率接近85%。
재분포식계산배경하，전통기우속성적정태방문공제책략다존재확전성차、난이실현등문제。침대상술문제，제출일충기우책략속성분해적충돌검측산법。해산법대책략속성진행분해，구조책략속성분해도，판단책략속성치지간적상교관계，근거정태책략충돌적정의진행책략충돌검측，종이제고책략충돌검측산법적가확전성화역실현성。실험결과표명，해산법대정태책략충돌적검측솔접근85%。
This paper discusses static access control policy conflict detection of Attribute Based Access Control(ABAC) in the distributed computing environment, proposes a static policy conflict detection algorithm based on policy attributes decomposition. Policy attributes are decomposed and the graph of policy attributes decomposition is constructed. The intersection relationship between predicates of policy attribute is judged. The algorithm detects policy conflicts by the definition of static policy conflict which improves extensibility and achievability. Experimental result indicates that the policy conflict detection rate of proposed algorithm can reach 85%.