计算机应用研究
計算機應用研究
계산궤응용연구
APPLICATION RESEARCH OF COMPUTERS
2013年
3期
900-905
,共6页
XACML%访问控制%规则优化%合并算法%优先级%策略评估
XACML%訪問控製%規則優化%閤併算法%優先級%策略評估
XACML%방문공제%규칙우화%합병산법%우선급%책략평고
XACML%access control%rule optimize%combination algorithms%priority%policy evaluation
为了提高XACML策略评估逐层匹配的效率, 在规则优化方面提出按规则的请求权重对规则进行排序的思想; 同时在策略评估方面提出XACML合并算法的优先级及主体的规则索引表, 优先选择符合匹配条件的策略和规则来提高匹配速度。仿真实验验证了采取这些措施后, 缩短了PDP 进行评估的时间, 提高了评估效率。
為瞭提高XACML策略評估逐層匹配的效率, 在規則優化方麵提齣按規則的請求權重對規則進行排序的思想; 同時在策略評估方麵提齣XACML閤併算法的優先級及主體的規則索引錶, 優先選擇符閤匹配條件的策略和規則來提高匹配速度。倣真實驗驗證瞭採取這些措施後, 縮短瞭PDP 進行評估的時間, 提高瞭評估效率。
위료제고XACML책략평고축층필배적효솔, 재규칙우화방면제출안규칙적청구권중대규칙진행배서적사상; 동시재책략평고방면제출XACML합병산법적우선급급주체적규칙색인표, 우선선택부합필배조건적책략화규칙래제고필배속도。방진실험험증료채취저사조시후, 축단료PDP 진행평고적시간, 제고료평고효솔。
To improve the efficiency of XACML rule matching by layer, in the rules optimization aspect, this paper proposed the thought of sorting of rules according to rules' request weight. At the same time, in the evaluation of policy aspect, this paper proposed the priorities of XACML combination algorithms and rules index table of the subject , preferentially select the satisfied policies and rules to improve the matching speed. The simulation experiment shows these measures shortened the evaluation time of PDP, improved the assessment efficiency. Finally, it proposed the future directions.
