2015 IEEE/ACM 8th International Conference on Utility and Cloud Computing

A Survey on Context Security Policies in the Cloud 



<LDQQLV9HUJLQDGLVDQG*UHJRULV0HQW]DV 6LPHRQ9HORXGLVDQG,UDNOLV3DUDVNDNLV
,QVWLWXWHRI&RPPXQLFDWLRQVDQG&RPSXWHU6\VWHPV
1DWLRQDO7HFKQLFDO8QLYHUVLW\RI$WKHQV
$WKHQV*UHHFH
^MYHUJJPHQW]DV`#PDLOQWXDJU
 ^VYHORXGLVLSDUDVNDNLV`#VHHUFRUJ


Abstract:LWKWKHSHUYDVLRQRIFORXGFRPSXWLQJQHZVHFXULW\
ULVNV DUH FUHDWHG $ SURPLVLQJ DSSURDFK WR DOOHYLDWLQJ WKHVH
ULVNV LV WR SURYLGH D VHFXULW\E\GHVLJQ IUDPHZRUN WKDW ZLOO
DVVLVW FORXG DSSOLFDWLRQ GHYHORSHUV LQ GHILQLQJ DSSURSULDWH
FRQWH[WGULYHQ DFFHVV FRQWURO SROLFLHV 7KLV SDSHU VXUYH\V
GLIIHUHQW DSSURDFKHV WR FRQWH[WGULYHQ DFFHVV FRQWURO DV ZHOO
DV GLIIHUHQW PRGHOOLQJ IRUPDOLVPV IRU UHSUHVHQWLQJ DFFHVV
FRQWURO SROLFLHV 7KH DLP RI WKLV VXUYH\ LV WR DVVHVV WKH
DSSURSULDWHQHVVRIH[LVWLQJDSSURDFKHVIRUWKHFRQVWUXFWLRQRI
D JHQHULF VHFXULW\E\GHVLJQ IUDPHZRUN LQ SDUWLFXODU RQH
ZKLFKLVH[SRVHGDVD3DD6RIIHULQJ
Keywords-context; access control; security policy; cloud
security; policy modelling
, ,1752'8&7,21
&ORXG FRPSXWLQJ LQWURGXFHV DQ HFRQRP\EDVHG
SDUDGLJP ZKHUHE\ LQIUDVWUXFWXUH SODWIRUP DQG DSSOLFDWLRQ
UHVRXUFHVDUHDEVWUDFWHG DV VHUYLFHV DQGGHOLYHUHGUHPRWHO\
RYHU WKH ,QWHUQHW E\ D PXOWLWXGH RI SURYLGHUV >@ ,WV
LQFUHDVLQJ DGRSWLRQ EULQJV DERXW VLJQLILFDQW EHQHILWV IRU
HQWHUSULVHV DQG XVHUV LQ WHUPV RI FRVW VDYLQJV LQFUHDVHG
IOH[LELOLW\DQGEXVLQHVVDJLOLW\$WWKHVDPHWLPHKRZHYHULW
FUHDWHV QHZ VHFXULW\ YXOQHUDELOLWLHV VWHPPLQJ PDLQO\ IURP
WKH IDFW WKDW FRUSRUDWH GDWD UHVLGH LQ H[WHUQDOO\FRQWUROOHG
VHUYHUV ([SORLWLQJ WKHVH YXOQHUDELOLWLHV PD\ UHVXOW LQ GDWD
FRQILGHQWLDOLW\DQGLQWHJULW\EUHDFKHV>@
$ SURPLVLQJ DSSURDFK WR DOOHYLDWLQJ WKH VHFXULW\ ULVNV
DVVRFLDWHG ZLWK FORXG FRPSXWLQJ LV WR DVVLVW DSSOLFDWLRQ
GHYHORSHUV LQ GHILQLQJ HIIHFWLYH VHFXULW\ FRQWUROV IRU WKH
VHQVLWLYH GDWD RI FORXG DSSOLFDWLRQV >@ 7R WKLV HQG ZH
HQYLVDJH D JHQHULF VHFXULW\E\GHVLJQ IUDPHZRUN ZKLFK LV
SURYLGHG DV D 3DD6 VROXWLRQ DQG ZKLFK JXLGHV GHYHORSHUV
WKURXJK WKH SURFHVV RI GHILQLQJ DSSURSULDWH DFFHVV FRQWURO
SROLFLHV IRU VDIHJXDUGLQJ WKHLU VHQVLWLYH GDWD 6XFK D
IUDPHZRUN EHDUV WZR VHPLQDO FKDUDFWHULVWLFV )LUVWO\ LW
KLQJHV XSRQ DQ DGHTXDWH DFFHVV FRQWURO VFKHPH RQH ZKLFK
WDNHVLQWRDFFRXQWWKHLQKHUHQWO\G\QDPLFDQGKHWHURJHQHRXV
QDWXUH RI FORXG HQYLURQPHQWV 6HFRQGO\ LW FDSWXUHV WKH
NQRZOHGJH WKDW OXUNV EHKLQG VXFK D VFKHPH HJ DFWLRQV
6RXWK(DVW(XURSHDQ5HVHDUFK&HQWUH6((5&
,QWHUQDWLRQDO)DFXOW\RIWKH8QLYHUVLW\RI6KHIILHOG
&,7<&ROOHJH
7KHVVDORQLNL*UHHFH
WKHFRUUHFWQHVVDQGFRQVLVWHQF\RIWKHDFFHVVFRQWUROSROLFLHV
GHILQHGE\DSSOLFDWLRQGHYHORSHUV
7KH ILUVW FKDUDFWHULVWLF FDOOV IRU WKH LQFRUSRUDWLRQ RI WKH
QRWLRQ RI context LQ DFFHVV FRQWURO SROLFLHV LH WKH
FRQVLGHUDWLRQ RI G\QDPLFDOO\FKDQJLQJ FRQWH[WXDO DWWULEXWHV
WKDWFKDUDFWHULVHGDWDDFFHVVHV,QIDFWWKHXVHRIFRQWH[WXDO
LQIRUPDWLRQHQDEOHVGDWDRZQHUVDQGDGPLQLVWUDWRUVWRDSSO\
DFFHVV FRQWURO SROLFLHV ZLWKRXW SULRU NQRZOHGJH RI WKH
HQWLWLHV UHTXHVWLQJ DFFHVV WR VHQVLWLYH GDWD LH E\
FRQVLGHULQJ RQO\ WKH FLUFXPVWDQFHV XQGHU ZKLFK VXFK
DFFHVVHV VKRXOG WDNH SODFH 7KH VHFRQG FKDUDFWHULVWLF FDOOV
IRU WKH DGRSWLRQ RI D GHFODUDWLYH DSSURDFK WR PRGHOOLQJ
SROLF\UHODWHG NQRZOHGJH RQH ZKLFK LV RUWKRJRQDO WR WKH
FRGH RI DQ\ SDUWLFXODU FORXG DSSOLFDWLRQ DQG ZKLFK FDQ EH
HDVLO\ DGDSWHG WR VXLW WKH QHHGV RI DQ\ VXFK DSSOLFDWLRQ ,Q
WKLV UHVSHFW WKLV SDSHU VHWV RXW WR SUHVHQW DQ RYHUYLHZ RI
GLIIHUHQWDSSURDFKHVWRFRQWH[WGULYHQDFFHVVFRQWURODQGWR
SROLF\PRGHOOLQJWKDWKDYHEHHQUHSRUWHGLQWKHOLWHUDWXUH,Q
SDUWLFXODU ZLWK UHVSHFW WR FRQWH[WGULYHQ DFFHVV FRQWURO LW
SUHVHQWV ZRUN RQ FRQWH[W PRGHOOLQJ FRQWH[W GHWHFWLRQ DQG
FRQWH[W DZDUHQHVV KLJKOLJKWLQJ WKHLU DGYDQWDJHV DQG
GLVDGYDQWDJHV :LWK UHVSHFW WR SROLF\ PRGHOOLQJ D VWDWHRI
WKHDUW DQDO\VLV LV SHUIRUPHG IRFXVLQJ RQ WKH EHQHILWV DQG
GUDZEDFNV RI YDULRXV HIIRUWV UHYROYLQJ DURXQG WKH
GHFODUDWLYH UHSUHVHQWDWLRQ RISROLF\UHODWHGLQIRUPDWLRQ:H
EHOLHYH WKDW VXFK D OLWHUDWXUH VXUYH\ ZLOO VKHG OLJKW RQ WKH
DSSURSULDWHQHVV RI H[LVWLQJ DSSURDFKHV IRU WKH FRQVWUXFWLRQ
RI D JHQHULF VHFXULW\E\GHVLJQ IUDPHZRUN VXFK DV WKH RQH
GLVFXVVHGDERYH
7KHUHVWRIWKLVSDSHULVRUJDQL]HGDVIROORZV6HFWLRQ,,
SUHVHQWVZRUNRQFRQWH[WGULYHQDFFHVVFRQWUROSHUWDLQLQJWR
GLIIHUHQW DFFHVV PRGHOV VXFK DV UROHEDVHG DFFHVV FRQWURO
PDQGDWRU\ DFFHVV FRQWURO GLVFUHWLRQDU\ DFFHVV FRQWURO DQG
DWWULEXWHEDVHG DFFHVV FRQWURO 6HFWLRQ ,,, SUHVHQWV GLIIHUHQW
VWUDQGVRIGHFODUDWLYHSROLF\GHVFULSWLRQIRUPDOLVPVIRFXVLQJ
RQ V\QWDFWLF GHVFULSWLRQV DQG VHPDQWLFDOO\ULFK PRGHOOLQJ
)LQDOO\6HFWLRQ,9SUHVHQWVFRQFOXVLRQVDQGIXWXUHZRUN
,, 6(&85,7<5(/$7('&217(;7
7KLVVHFWLRQGHVFULEHVUHVHDUFKRQFRQWH[WPRGHOOLQJDQG
DFWRUV ORFDWLRQV HQYLURQPHQWDO DWWULEXWHV HWF XVLQJ D
JHQHULFDQGH[WHQVLEOHIRUPDOLVPRQHZKLFKFDQEHWDLORUHG
WR WKH SDUWLFXODU QHHGV RI GLIIHUHQW FORXG DSSOLFDWLRQV 7KLV
NQRZOHGJHPD\WKHQEHXVHGIRUUHDVRQLQJJHQHULFDOO\DERXW
978-1-4503-3890-5/15 $31.00 2015 IEEE
978-0-7695-5697-0/15
DOI 10.1109/UCC.2015.103
FODVVLILHVH[LVWLQJVHFXULW\DQGSULYDF\UHODWHGVKRUWFRPLQJV
A. Context-driven Access Control
$PRQJ WKH PRVW VLJQLILFDQW VHFXULW\ UHODWHGFRQFHUQV LQ
G\QDPLF DQG KHWHURJHQHRXV HQYLURQPHQWV HVSHFLDOO\ LQ
583
589
FORXGHQDEOHG V\VWHPV LV WKH DFFHVV FRQWURO WKDW VKRXOG EH
DEOH WR FRQVLGHU PRVW RI WKH G\QDPLF DVSHFWV RI VXFK
HQYLURQPHQWV 7KH HPHUJLQJ DQG XELTXLWRXV FRPSXWLQJ
HQYLURQPHQWVQHHGVHFXULW\FRQWUROWKDWLVHDVLO\DGDSWDEOHWR
WKH FKDQJLQJ XVHU RU HQYLURQPHQWDO FRQWH[WV &RQWH[W
LQIRUPDWLRQXVHGLQDQDFFHVVFRQWUROGHFLVLRQFDQEHGHILQHG
DV DQ\ UHOHYDQW LQIRUPDWLRQ DERXW WKH VWDWH RI D UHOHYDQW
PDQDJHDEOH LQ KHWHURJHQHRXV GRPDLQV ZKLOH LW GRHVQW
VXSSRUWWKHILQHJUDLQHGPRGHOOLQJRIGLIIHUHQWGDWDREMHFWV
,Q JHQHUDO DOWKRXJK *5%$& RIIHUV KLJK H[SUHVVLYLW\
PDNLQJ LW WKHRUHWLFDOO\ PRUH VXLWDEOH IRU FRQWH[WDZDUH
DXWKRUL]DWLRQ LQ SUDFWLFH LW EHFRPHV FXPEHUVRPH WR
PDLQWDLQGXHWRWKHODUJHQXPEHURIHQYLURQPHQWUROHV
2WKHU H[LVWLQJ PRGHOV NQRZQ DV &RQWH[WDZDUH DFFHVV
FRQWH[WXDO HQWLW\ RU WKH VWDWH RI DQ\ UHOHYDQW UHODWLRQVKLS
EHWZHHQ GLIIHUHQW UHOHYDQW HQWLWLHV DW D SDUWLFXODU WLPH WKDW
VKRXOG EH WDNHQ LQWR DFFRXQW EHIRUH JUDQWLQJ RU UHMHFWLQJ D
VSHFLILF DFFHVV UHTXHVW )URP WKLV SHUVSHFWLYH FRQWH[W
DZDUHQHVV UHODWHV WR WKH XVH RI WKLV FRQWH[W LQIRUPDWLRQ IRU
DFFHVV FRQWURO GHFLVLRQ PDNLQJ ,Q WKH OLWHUDWXUH WKHUH DUH
WKUHH EDVLFDFFHVVFRQWURO PRGHOV >@ QDPHO\ 'LVFUHWLRQDU\
FRQWURO &$$& DUH SUHGRPLQDQWO\ EDVHG RQ 5%$& >@
KDYLQJ VRPH RI WKHP W\SLFDOO\ WDUJHWLQJ D VSHFLILF GRPDLQ
)RU H[DPSOH =KDQJ DQG 3DUDVKDU >@ KDYH SURSRVHG D
'\QDPLF 5%$& PRGHO WKDW H[WHQGV WKH UROH EDVHG DFFHVV
FRQWURO PRGHO DQG G\QDPLFDOO\ DGMXVWV VWDWLF 5ROH
$VVLJQPHQWV DQG3HUPLVVLRQ$VVLJQPHQWV EDVHGRQFRQWH[W
LQIRUPDWLRQ6XFKPRGHOVKRZHYHUKDYHQRWEHHQGHVLJQHG
$FFHVV &RQWURO'$&0DQGDWRU\ $FFHVV &RQWURO0$& WRSURYLGHILQHJUDLQHGGDWDDFFHVVFRQWUROHJE\SURYLGLQJ
DQG 5ROH%DVHG $FFHVV &RQWURO 5%$& $OO WKHVH PRGHOV WKHDELOLW\WRVSHFLI\GLIIHUHQWDFFHVVUXOHVIRUGLIIHUHQWURZV
DUH NQRZQ DV LGHQWLW\ EDVHG DFFHVV FRQWURO PRGHOV ZKHUH RI D GDWDEDVH ,Q DGGLWLRQ RWKHU DSSURDFKHV OLNH >@
XVHU VXEMHFWV DQG UHVRXUFHV REMHFWV DUH LGHQWLILHG E\ LQFRUSRUDWH RQO\ VSHFLILF W\SHV RI FRQWH[WV VXFK DV ORFDWLRQ
XQLTXH QDPHV >@ ,Q WKH OLWHUDWXUH D IRXUWK W\SH KDV EHHQ DQG WLPH .XONDUQL HW DO >@ SURSRVHG D &RQWH[WDZDUH
LGHQWLILHG WKH $WWULEXWH %DVHG $FFHVV &RQWURO $%$&
GLVFXVVHGEHORZ0RVWRIWKHWUDGLWLRQDOVHFXULW\PRGHOVDUH
FRQWH[W LQVHQVLWLYH ,Q WKLV VHFWLRQ ZH GLVFXVV WKH PRVW
LQWHUHVWLQJ UHVHDUFK DSSURDFKHV WKDW XVH FRQWH[W DV D ILUVW
FODVV HQWLW\ IRU DFFHVV FRQWURO GHFLVLRQ PDNLQJ ZLWKRXW
UHVWULFWLQJWKHPWRRQO\WKHFORXGEDVHGRQHV
B. RBAC Related Approaches
7KH EDVLV RI 5%$& LV WKH FRQFHSW RI D UROH ZKLFK
FRQVWLWXWHVDJURXSLQJPHFKDQLVPIRUFDWHJRUL]LQJLQGLYLGXDO
5%$& &$5%$& PRGHO IRU SHUYDVLYH DSSOLFDWLRQV WKDW
FRQVLGHUVXVHUDQGUHVRXUFHDWWULEXWHVDVFRQWH[WFRQVWUDLQWV
+H HW DO >@ FRQVLGHUHG DFFHVV FRQWURO IRU :HE VHUYLFHV
EDVHG RQ WKH UROHV DQG LQWURGXFHG D &$$& SROLF\ PRGHO
FRQVLGHULQJ WKH XVHU UHVRXUFH DQG HQYLURQPHQW FRQFHSWV
7RQLQHOOL HW DO >@ SURSRVHG D &$$& DSSURDFK ZKLFK
SURYLGHVUHVRXUFHDFFHVVSHUPLVVLRQRQWKHEDVLVRIUHVRXUFH
DYDLODELOLW\ XVHU UROHV ORFDWLRQ DQG WLPH ,W LQYROYHV DQ
RQWRORJ\EDVHG IUDPHZRUN WKDW LQFOXGHV ERWK FRQWH[W DQG
SROLF\ PRGHOV 7KH GLVDGYDQWDJH RI WKH DERYH PHQWLRQHG
XVHUV FDOOHG VXEMHFWV EDVHG RQ YDULRXV SURSHUWLHV HJ MRE DSSURDFKHV LV WKDW WKH\ RQO\ FRQVLGHU VSHFLILF W\SHV RI
WLWOHXVHUIXQFWLRQVUHVSRQVLELOLWLHVHWF(DFKVXEMHFWKDVD
UROH VHW ZKLFK FRQVLVWV RI DOO WKH UROHV WKDW WKH VXEMHFW KDV
EHHQ DXWKRUL]HG WR XVH $OWKRXJK 5%$& LV YHU\ XVHIXO IRU
PRGHOOLQJDFFHVVFRQWUROLQDYDULHW\RIDSSOLFDWLRQVLWVUROHV
DUHLQKHUHQWO\WRRVWDWLFLQWKHVHQVHWKDWWKH\FDQQRWEHXVHG
DW UXQWLPH WR FDSWXUH VHFXULW\UHOHYDQW FRQWH[W IURP WKH
HQYLURQPHQW DQG XOWLPDWHO\ KDYH D G\QDPLF LPSDFW RQ
FRQWH[WV ZKLFK DUH QRW VXIILFLHQW DQG JHQHULF HQRXJK WR EH
XVHGLQG\QDPLFFORXGHQYLURQPHQWV/RGGHUVWHGWHWDO>@
SURSRVHG 6HFXUH0/ DQ 5%$&EDVHG PRGHOOLQJ ODQJXDJH
IRU LQWHJUDWLQJ DFFHVV FRQWURO LQIRUPDWLRQ LQWR DSSOLFDWLRQ
PRGHOV H[SUHVVHG LQ 80/ 7R DGGUHVV WKH LQHIILFLHQFLHV RI
WUDGLWLRQDO 5%$& PRGHOV WKH\ DOVR LQWURGXFHG WKH FRQFHSW
RIDXWKRUL]DWLRQFRQVWUDLQWV7KHVHDUHGHILQHGLQWKH2EMHFW
DFFHVV GHFLVLRQV 5%$& WKXV ODFNV LQ JHQHUDO VXSSRUW IRU
H[SUHVVLQJDFFHVVFRQWUROFRQGLWLRQVWKDWUHIHUWRWKHVWDWHRI
D V\VWHP HJ WKH VWDWH RI D SURWHFWHG UHVRXUFH SDUDPHWHU
YDOXHV GDWH RU WLPH >@ ,Q RUGHU WR DOOHYLDWH WKH
GLVDGYDQWDJHV RI VXFK VWDWLF PRGHOV D QXPEHU RI VROXWLRQV
KDYHEHHQSURSRVHGIRUFRQWH[WEDVHGDFFHVVFRQWURO2QHRI
WKHP LV WKH 2UJDQL]DWLRQ 5ROH %DVH $FFHVV &RQWURO
&RQVWUDLQW /DQJXDJH 2&/ DQG H[SUHVV SUHFRQGLWLRQV IRU
JUDQWLQJ DFFHVV WR RQH RU PRUH RSHUDWLRQ RQ SDUWLFXODU
UHVRXUFHV$OWKRXJKWKHVHSUHFRQGLWLRQVWDNHLQWRDFFRXQWWKH
G\QDPLF VWDWH RI WKH WDUJHW UHVRXUFHWKHFXUUHQW FDOO RU WKH
HQYLURQPHQW WKH\ DUH QRW EDVHG RQ DQ H[WHQVLEOH DQG
UHXVDEOHFRQWH[WPRGHOUHQGHULQJWKLVDSSURDFKRYHUO\VWDWLF
IRUWKHUHTXLUHPHQWVRIFORXGEDVHGV\VWHPV
25%$& PRGHO 25%$& LV DQ DFFHVV FRQWURO PRGHO LQ ,QDVLPLODUYHLQWKHZRUNLQ>@SURSRVHGDQRQWRORJ\
ZKLFKDXWKRUL]DWLRQLVJLYHQWRXVHUVGHSHQGLQJRQWKHLUUROH EDVHG FRQWH[W PRGHO QDPHG &RQWH[W 2QWRORJ\ IRU $FFHVV
LQ DQ RUJDQL]DWLRQ LQ D JLYHQ FRQWH[W >@ $QRWKHU PRUH &RQWURO &2$& IRU UHSUHVHQWLQJ DQG FDSWXULQJ GLIIHUHQW
LQWHUHVWLQJ DSSURDFK IURP WKH FRQWH[W SHUVSHFWLYH LV WKH W\SHVRIFRQWH[WLQIRUPDWLRQLQDV\VWHPDWLFZD\7KHDGGHG
*HQHUDOL]HG 5%$& *5%$& >@ 7KH *5%$& SDUDGLJP
LQFRUSRUDWHVWKHFRQFHSWRIHQYLURQPHQWUROHV7KHVHFDSWXUH
HQYLURQPHQWDO LQIRUPDWLRQ VXFK DV WLPH RI GD\ RU ZHDWKHU
FRQGLWLRQV ZKLFK FDQ EH XVHG WR PHGLDWH DFFHVV FRQWURO
&RQYLQJWRQHWDO>@ZHUHDPRQJWKHILUVWWRDSSO\*5%$&
WR DSSOLFDWLRQV IRU LQWHOOLJHQW KRPHV )XUWKHUPRUH *5%$&
PRGHOV VXSSRUW ULFKHU FRQWH[WXDO LQIRUPDWLRQ IRU LPSDFWLQJ
YDOXHRIWKLVYHU\LQWHUHVWLQJZRUNLVWKHIDFWWKDWWKLVPRGHO
DOORZV IRU UHDVRQLQJ DERXW KLJKOHYHO LPSOLFLW FRQWH[W
LQIRUPDWLRQ WKDW LV QRWGLUHFWO\ DYDLODEOHEXW FDQEH GHULYHG
IURP RWKHU LQIRUPDWLRQ ,Q RUGHU WR H[SUHVV WKHLU FRQWH[W
PRGHO WKH 2:/ ODQJXDJH LV XVHG DQG LV H[WHQGHG ZLWK
6:5/IRULQIHUULQJLPSOLFLWFRQWH[WZLWKXVHUGHILQHGUXOHV
7KHVSHFLILFRQWRORJ\LQYROYHVWZRNLQGVRIFRQWH[WHQWLWLHV
WKHUHVXOWRIDQDFFHVVUHTXHVWWKDQMXVWFRQVLGHULQJWLPHDQG WKHFRUHLHXVHUUHVRXUFHRZQHUUROHDQGHQYLURQPHQWDO
ORFDWLRQ DVSHFWV WKDW RWKHU DSSURDFKHV VXSSRUW 7KH PDLQ LH 5HODWLRQVKLS,QIR 6WDWXV,QIR 3URILOH,QIR /RFDWLRQ,QIR
GUDZEDFNRI WKLV ZRUN LV WKDW LWSURSRVHVD GRPDLQ VSHFLILF 7HPSRUDO,QIR DQG +LVWRULFDO,QIR WKDW DUH UHOHYDQW WR WKH
HQYLURQPHQWUROHKLHUDUFK\WKDWLWLVQRWHDVLO\H[WHQVLEOHDQG DFFHVV UHTXHVW %DVHG RQ WKDW PRGHO WKH DXWKRUV DOVR

590
584
LQWURGXFHG D FRQWH[WDZDUH SROLF\ RQWRORJ\ FDOOHG &$32 GHVFULELQJ GHFODUDWLYH DFFHVV FRQWURO SROLFLHV HQFRXUDJLQJ
H[SUHVVHG DOVR XVLQJ 2:/ DQG 6:5/ IRU GHILQLQJ DQG
HQIRUFLQJ DFFHVV FRQWURO SROLFLHV DQG WDNLQJ LQWR DFFRXQW
UHOHYDQWFRQWH[WXDOLQIRUPDWLRQ7KLVSROLF\PRGHOSURYLGHV
FRQWH[WDZDUH DFFHVV FRQWURO GHFLVLRQV DQG KDV EHHQ
GHPRQVWUDWHG ZLWK D SURWRW\SH LQ WKH KHDOWKFDUH GRPDLQ
1HYHUWKHOHVV RQWRORJ\EDVHG UHDVRQLQJ LQ 2:/ LV QRW
WKH VHSDUDWLRQ RI WKH DFFHVV GHFLVLRQ IURP WKH SRLQW RI XVH
%KDWWL HW DO >@ GHVFULEHG D IUDPHZRUN IRU HQIRUFLQJ UROH
EDVHG DFFHVV FRQWURO LQ G\QDPLF ;0/EDVHG ZHE VHUYLFHV
7KHLUVROXWLRQLQFOXGHVFRQFHSWVRIUROHVDQGFRQWH[W
$ QXPEHU RI RWKHU UHVHDUFK HIIRUWV HJ > @ KDYH
IXUWKHU H[WHQGHG WKH $WWULEXWHEDVHG $FFHVV &RQWURO
FRQVLGHUHG HIILFLHQW LQ LQIHUULQJ WKH KLJKOHYHO LPSOLFLW $%$& DSSURDFK WR SURYLGH DFFHVV FRQWURO WR VRIWZDUH
FRQWH[WV HVSHFLDOO\ LQ KLJKO\ G\QDPLF DQG KHWHURJHQHRXV VHUYLFHVLQDFRQWH[WDZDUHPDQQHU6XFKDQH[DPSOHLVWKH
HQYLURQPHQWVOLNHFORXGEDVHGV\VWHPV
C. MAC and DAC Related Approaches
0$& DQG '$& DUH DPRQJ WKH ILUVW DFFHVV FRQWURO
PRGHOV WKDW KDYH EHHQ XVHG LQ KLJKO\ VHQVLWLYH SURGXFWLRQ
HQYLURQPHQWV 6ROXWLRQV WKDW DUH EDVHG RQ 0$& DFFHVV
FRQWURODUHLQKHUHQWO\LQDSSURSULDWHDVDEDVLVIRU&$$&DV
WKH\ LQYROYH ULJLG DQG VWDWLF PHWKRGV WKDW DUH XVHG IRU
KLJKO\VHFXUH PLOLWDU\W\SH RI VHWWLQJV $Q HIIRUW WKDW XVHV
0$&LVWKDWRI-UMHQV>@WKDWSURSRVHGDVSHFLILFDWLRQRI
FRQILGHQWLDOLW\DQGLQWHJULW\UHTXLUHPHQWVEDVHGRQ80/
FRQFHSW RI /RFDWLRQDZDUH DFFHVV FRQWURO /$$& ZKLFK
DOORZV D V\VWHP WR JUDQW RUGHQ\ DFFHVV WR XVHUV EDVHGRQ
WKHLU SK\VLFDO ORFDWLRQ /$$& PRGHOV W\SLFDOO\ H[WHQG WKH
WKUHH EDVLF DFFHVV FRQWURO PRGHOV >@ (YHQ WKRXJK /$$&
SURWRFROVKDYHEHHQVWXGLHGH[WHQVLYHO\>@WKHUHLVDFOHDU
ODFN RI VFKHPHV WKDW GHWHUPLQH XVHU DFFHVV QRW RQO\ RQ WKH
EDVLVRIWKHXVHUVSK\VLFDOORFDWLRQDQGSURYLGHGFUHGHQWLDOV
EXW DOVR DFFRUGLQJ WR DGGLWLRQDO SHUWLQHQW FRQWH[WXDO
LQIRUPDWLRQ&RUUDGLHWDO>@SURSRVHGD&$$&PRGHOIRU
XELTXLWRXV HQYLURQPHQWV ZKHUH SHUPLVVLRQV DUH GLUHFWO\
DVVRFLDWHG ZLWK FRQWH[WV HJ XVHU ORFDWLRQ XVHU DFWLYLWLHV
'$&PRGHOVUHO\RQDFFHVVFRQWUROPDWULFHVZKRVHURZV XVHU GHYLFH WLPHUHVRXUFHDYDLODELOLW\ DQG UHVRXUFH VWDWXV
DQGFROXPQVFRUUHVSRQGWRVXEMHFWVDQGREMHFWVUHVSHFWLYHO\ +XOVHERVFK HW DO >@ SURSRVHG D &RQWH[WVHQVLWLYH DFFHVV
ZKLOHWKHLULQWHUVHFWLRQSRLQWVFRUUHVSRQGVWRDVHWRIDOORZHG FRQWURO&6$&IUDPHZRUNDQGVXJJHVWHGDSURFHVVZKHUHE\
DFFHVV RSHUDWLRQV $FFHVV RSHUDWLRQV DUH RIWHQ LPSOHPHQWHG WKH VHUYLFH SURYLGHU FDQ GHILQH YDULRXV VHFXULW\ UXOHV EDVHG
LQWHUPVRI $FFHVVFRQWUROOLVWV$&/ZKHUH HDFKREMHFWLV
DVVRFLDWHG ZLWK DQ $&/ WKDW GHWHUPLQHV SRVLWLYH DQG
QHJDWLYH SHUPLVVLRQV ZLWK WKH ODWWHU HQMR\LQJ KLJKHU
SUHFHGHQFH,QDGGLWLRQWRWKDW'$&PRGHOVDUHFRPPRQO\
XVHG ZLWK JURXSV ZKHUHE\ XVHUV ZLWK VLPLODU DFFHVV ULJKWV
DUH IRUPHG LQWR JURXSV WR ZKLFK WKHUHDUHDVVLJQHG VSHFLILF
SHUPLVVLRQV*URXSSROLFLHVDUHW\SLFDOO\H[SUHVVHGLQWHUPV
RQO\ RQ WKH FRQWH[W RI WKH XVHU DQG QRW KHU DFWXDO LGHQWLW\
7KH\ DFWXDOO\ GHILQH DFFHVV FRQWURO RQ WKH EDVLV RI DQ
LQH[WULFDEOH UHODWLRQVKLS EHWZHHQ XVHUGHYLFH DQG VHUYLFH
DQG WKH\ SURSRVHG YHULILFDWLRQ PHWKRGV IRU DQRQ\PRXV
DFFHVVEDVHGRQORFDWLRQDQGVHUYLFHXVDJHKLVWRU\SDWWHUQV
,QSDUWLFXODUWKHVXEMHFWDXWKHQWLFDWLRQLVEDVHGRQYHULI\LQJ
ZKHWKHU RU QRW WKH VLWXDWLRQDO FRQWH[W FODLPHG LV D YDOLG
RI *URXS 3ROLF\ 2EMHFWV *32V LH VHWV RI FRQILJXUDWLRQV
WKDW GHWHUPLQH YDULRXV DWWULEXWHV SHUWDLQLQJ WR XVHU DFFHVVHV
VXFK DV PD[LPXP QXPEHU RI DOORZDEOH IDLOHG ORJLQV
SDVVZRUG VWUHQJWK SHUREMHFW DFFHVV ULJKWV HWF 7\SLFDOO\
DFFHVV FRQWURO SHUPLVVLRQV DUH GHILQHG VWDWLFDOO\ $ UHODWHG
DSSURDFK KDV EHHQ SURSRVHG E\ %HUWLQR HW DO >@ ZKR
LQYHVWLJDWHG VXSSRUW IRUWHPSRUDODXWKRUL]DWLRQV LQGDWDEDVH
V\VWHPV 7KH\ KDYH H[DPLQHG ERWK SHULRGLF DQG QRQ
SHULRGLF DXWKRUL]DWLRQV 7KHLU DXWKRUL]DWLRQ ODQJXDJH LV
GHILQHG LQ D ORZ OHYHO IRUPDW ZKLFK LQKHUHQWO\ OLPLWV LWV
XVHIXOQHVVDQGUHXVDELOLW\FDSDELOLWLHV
FRQWH[WDWWULEXWHRIWKHVXEMHFW1HYHUWKHOHVVWKHVHFXULW\RI
WKH SURSRVHGPRGHOLVTXHVWLRQDEOH VLQFH WKHDXWKRUVIDLOWR
SURYLGH D VHFXULW\ DQDO\VLV RI WKHLU SURSRVHG PRGHO $SDUW
IURP WKDW DXWKRUV GR QRW GHVFULEH WKH DGYHUVDULDO PRGHO
XQGHUZKLFKWKHLUSURWRFROLVFRQVLGHUHGVHFXUHWKXVLWLVQRW
FOHDU LI WKH XVH RI WKH SURSRVHG WHFKQLTXH LQ UHDO OLIH
DSSOLFDWLRQV ZLOO OHDG WR VHFXULW\ EUHDFKHV 0RUHRYHU D
JHQHULF OLPLWDWLRQ WKDW WKHVH DSSURDFKHV SUHVHQW LV WKDW WKH\
FRQVLGHU RQO\ D OLPLWHG VHW RI FRQWH[WV ZKLFK OLPLWV WKH
IXQFWLRQDOLW\WKDWFDQEHRIIHUHGWRWKHHQGXVHU
&KHQ HW DO >@ GHILQHG &RQWH[W %URNHU $UFKLWHFWXUH
D. ABAC Related Approaches
7KHDERYHPHQWLRQHGDFFHVVFRQWUROPRGHOVDORQJZLWK
WKHLU H[WHQVLRQV FDQ EH FRQVLGHUHG DV VSHFLDO FDVHV RI
&R%U$&R%U$LVDFRQWH[WRQWRORJ\EDVHGRQ2:/ZKLFK
RQO\ FRYHUV GRPDLQ VSHFLILF FRQWH[W HOHPHQWV LQ D VPDUW
VSDFH HQYLURQPHQW ZKLOH LW KDV QR H[SOLFLW VXSSRUW IRU
PRGHOOLQJ JHQHUDO FRQWH[WV LQ KHWHURJHQHRXV HQYLURQPHQWV
$WWULEXWH %DVHG $FFHVV &RQWURO $%$& $FFRUGLQJ WR &R%UD IRFXVHV RQ PRGHOOLQJ VWDWLF SK\VLFDO VSDFH ZLWK
1,67 >@ $%$& LV D ORJLFDO DFFHVV FRQWURO PHWKRGRORJ\ UHODWLYH VWDEOH ORZHU FRQWH[W GDWD UHVRXUFHV ,Q &R%U$ WKH
ZKHUH DXWKRUL]DWLRQ WR SHUIRUP D VHW RI RSHUDWLRQV LV DXWKRUV XVHG WKH 6WDQGDUG 2QWRORJ\ IRU 8ELTXLWRXV DQG
GHWHUPLQHG E\ HYDOXDWLQJ DWWULEXWHV DVVRFLDWHG ZLWK WKH
VXEMHFW REMHFW UHTXHVWHG RSHUDWLRQV DQG LQ VRPH FDVHV
HQYLURQPHQWFRQGLWLRQVDJDLQVWSROLF\UXOHVRUUHODWLRQVKLSV
WKDW GHVFULEH WKH DOORZDEOH RSHUDWLRQV IRU D JLYHQ VHW RI
DWWULEXWHV 7KH NH\ GLIIHUHQFH RI $%$& LV WKH IDFW WKDW WKH
FRQFHSWRISURYLGHGSROLFLHVFDQH[SUHVVDFRPSOH[%RROHDQ
UXOH VHW WKDW FDQ HYDOXDWH PDQ\ GLIIHUHQW DWWULEXWHV 2QH
H[DPSOH RI DQ DFFHVV FRQWURO IUDPHZRUN WKDW LV FRQVLVWHQW
ZLWK $%$& LV WKH 2$6,6 H;WHQVLEOH $FFHVV &RQWURO
3HUYDVLYH $SSOLFDWLRQV 6283$ >@ 7KH 6283$
RQWRORJ\ LV H[SUHVVHG XVLQJ 2:/ DQG LQFOXGHV PRGXODU
FRPSRQHQW YRFDEXODULHV WR UHSUHVHQW LQWHOOLJHQW DJHQWV LQ
SHUYDVLYH FRQWH[WDZDUH V\VWHPV ZLWK DVVRFLDWHG EHOLHIV
GHVLUH DQG LQWHQWLRQV WLPH VSDFH HYHQWV XVHU SURILOHV
DFWLRQVDQGSROLFLHVIRUVHFXULW\DQGSULYDF\,Q >@ 2QWR
$&0 LV SURSRVHG D VHPDQWLF DQDO\VLV PRGHO WKDW FDQ
DGGUHVV WKH GLIIHUHQFH LQ WKH SHUPLWWHG DFFHVV FRQWURO
EHWZHHQ VHUYLFH SURYLGHUV DQG XVHUV 7KLV PRGHO ZDV
0DUNXS /DQJXDJH ;$&0/ ,W KDV EHHQ XVHG IRU SUHVHQWHG DV DQ LQWHOOLJHQW FRQWH[WDZDUH DFFHVV VFKHPH IRU

591
585
SURDFWLYHO\GHWHUPLQLQJWKHOHYHORIUHVRXUFHDFFHVVEDVHGRQ
RQWRORJ\ UHDVRQLQJ DQG D VHPDQWLF DQDO\VLV PHWKRG ZKLFK
GLVWLQJXLVKHV EHWZHHQ XVHU DQG DGPLQLVWUDWRU SROLFLHV ,Q
DGGLWLRQ WR WKDW D FRQWH[W RQWRORJ\ ZDV GLVFXVVHG IRU XVHU
DXWKHQWLFDWLRQ DQG DXWKRUL]DWLRQ FRQVLVWLQJ RI LGHQWLW\
SK\VLFDOSUHIHUHQFHDQGRWKHULQIRUPDWLRQ:DQJHWDO>@
H[SUHVVLQJ SROLF\ UXOHV $ UHIHUHQFH PRQLWRU RU SROLF\
GHFLVLRQHQIRUFHPHQWSRLQWLVWKHQHPSOR\HGWRSDUVHWKHVH
UXOHVDQGGHWHUPLQHZKHWKHUDSDUWLFXODUDFWRULVDOORZHGWR
SHUIRUP FHUWDLQ DFWLRQV 1HYHUWKHOHVV VXFK V\QWDFWLF
GHVFULSWLRQV IDLO WR FDSWXUH WKH NQRZOHGJH OXUNLQJ EHKLQG
SROLFLHV WKH\ DUH PHUHO\ GDWD PRGHOVWKDW ODFN DQ\ IRUP RI
SURSRVHG DQ 2:/ HQFRGHG &21WH[W 21WRORJ\ &2121 VHPDQWLF DJUHHPHQW EH\RQG WKH ERXQGDULHV RI WKH
IRU PRGHOOLQJ FRQWH[W LQIRUPDWLRQ LQ SHUYDVLYH RUJDQLVDWLRQV WKDW GHYHORSHG WKHP $Q\ LQWHURSHUDELOLW\
HQYLURQPHQWV&2121KDVEHHQGHVLJQHGKDYLQJSDUWLFXODU UHOLHV RQ WKH XVH RI YRFDEXODULHV WKDW DUH VKDUHG DPRQJ DOO
DSSOLFDWLRQV LQ PLQG VPDUW KRPHV DQG LV QRW FRQVLGHUHG SDUWLHV LQYROYHG LQ DQ LQWHUDFWLRQ 7KLV KDV D QXPEHU RI
IOH[LEOH IRU RIIHULQJ ILQHJUDLQHG DFFHVV FRQWURO LQ RWKHU OLPLWDWLRQV L LW OHDGV WR DGKRF UHDVRQLQJ DERXW SROLF\
DSSOLFDWLRQ GRPDLQV +HQULFNVHQ HW DO >@ GHYHORSHG D FRPSOLDQFH RQH ZKLFK LV WLHG WR WKH VSHFLILF YRFDEXODULHV
&RQWH[W0RGHOLQJ/DQJXDJH&0/DQGDWRROWKDWWUDQVODWHV WKDWH[SUHVVWKHUXOHVDFFRUGLQJWRZKLFKWKHUHDVRQLQJWDNHV
&0/EDVHG FRQWH[W PRGHOV WR DQ 2:/ UHSUHVHQWDWLRQ IRU SODFHLLLWOLPLWVWKHUHXVDELOLW\DQGSRUWDELOLW\RISROLFLHV
WKHSXUSRVHRIXWLOL]LQJWKH2:/WHFKQRORJ\+RZHYHUVXFK LLL LW SUHFOXGHV WKH LGHQWLILFDWLRQ RI LQWHUSROLF\ UHODWLRQV
H[LVWLQJJHQHUDOFRQWH[WPRGHOVGRQRWSURYLGHGLUHFWVXSSRUW
IRU FRQFHSWV UHODWHG WR DFFHVV FRQWURO $ UHFHQW &$$&
IUDPHZRUN IRU WKH :HE RI GDWD LV JURXQGHG RQ WZR
RQWRORJLHV ZKLFK GHDO ZLWK WKH FRUH DFFHVV FRQWURO SROLF\
FRQFHSWVDQGWKHFRQWH[WFRQFHSWV>@'HVSLWHWKHIDFWWKDW
LW VXSSRUWV DFFHVV FRQWURO DQG FRQVLGHUV WKUHH LPSRUWDQW
LYLWOLPLWVWKHDELOLW\WRSHUIRUPSROLF\JRYHUQDQFH
B. Semantically-rich Policy Description
,Q RUGHU WR RYHUFRPH WKH DIRUHPHQWLRQHG OLPLWDWLRQV
VHPDQWLFDOO\ULFK DSSURDFKHV WR WKH VSHFLILFDWLRQRISROLFLHV
KDYHEHHQEURXJKWWRWKHDWWHQWLRQRIWKHUHVHDUFKFRPPXQLW\
GLPHQVLRQV RI FRQWH[W XVHU GHYLFH DQG HQYLURQPHQW WKH >@ 7KHVH JHQHUDOO\ HPEUDFH 6HPDQWLF :HE
IUDPHZRUN GRHV QRW KDYH WKH FDSDELOLW\ RI LQIHUULQJ KLJK UHSUHVHQWDWLRQV IRU FDSWXULQJ ZKDW ZH WHUP DFWLRQRULHQWHG
OHYHO LPSOLFLW FRQWH[WV ,Q JHQHUDO $%$& DQG WKHLU SROLFLHV LH SROLFLHV ZKLFK FRQWURO ZKHQ D SDUWLFXODU DFWRU
H[WHQVLRQV DYRLG WKH QHHG IRU FDSDELOLWLHV RSHUDWLRQREMHFW FDQ SHUIRUP D VSHFLILHG DFWLRQ RQ RU WKURXJK WKH XVH RI D
SDLUVWREHGLUHFWO\DVVLJQHGWRVXEMHFWUHTXHVWHUVRUWRWKHLU
UROHVRUJURXSVEHIRUHWKHUHTXHVWLVPDGH
,,, 5(/$7(':25.2132/,&<02'(/,1*
7KH SXUSRVH RI SROLFLHV LV WR JHQHUDOO\ GHWHUPLQH DQG
JXLGH WKH PDQQHU LQ ZKLFK HQWLWLHV ZLWKLQ D SDUWLFXODU
GRPDLQDFW7RWKLVHQGWKH\SURYLGHDVHWRIXQDPELJXRXV
UXOHVZKLFKDUHLQWHUSUHWHGE\HQIRUFHPHQWPHFKDQLVPVDQG
ZKLFKFRQVWUDLQWKHEHKDYLRXURIWKHHQWLWLHV%\VHSDUDWLQJ
SROLFLHV IURP WKH LPSOHPHQWDWLRQ RI WKH HQIRUFHPHQW
PHFKDQLVPV LW LV SRVVLEOH WR SURYLGH GLIIHUHQW EHKDYLRXUDO
FRQVWUDLQWV IRU WKH HQWLWLHV ZLWKRXW KDYLQJ WR FKDQJH WKH
LPSOHPHQWDWLRQ RI WKH HQIRUFHPHQW PHFKDQLVPV 6XFK D
VHSDUDWLRQKRZHYHUUHTXLUHVDGHFODUDWLYHUHSUHVHQWDWLRQRI
SROLFLHV RQH ZKLFK LV RUWKRJRQDO WR WKH FRGH RI WKH
FHUWDLQUHVRXUFH0RUHVSHFLILFDOO\WKHVHDSSURDFKHVHPSOR\
RQWRORJLHVLQRUGHUWRDVVLJQPHDQLQJWRDFWRUVDFWLRQVDQG
UHVRXUFHV%HLQJDIRUPDOH[SOLFLWVSHFLILFDWLRQRIDVKDUHG
FRQFHSWXDOL]DWLRQ >@ DQ RQWRORJ\ SURYLGHV D IOH[LEOH
IRUPDO DQG XQDPELJXRXV PHDQV RI DJUHHPHQW XSRQ WKH
VHPDQWLFV RI FRQFHSWV DQG WKHLU LQWHUUHODWLRQV LQ D JLYHQ
GRPDLQRIGLVFRXUVH
,W EHFRPHV HYLGHQW WKDW LQ FRQWUDVW WR V\QWDFWLF SROLF\
GHVFULSWLRQV ZKLFK DLP DW GHYLVLQJ SXUSRVHEXLOW
YRFDEXODULHVIRUH[SUHVVLQJWKHUXOHVWKDWLPSOHPHQWSROLFLHV
VHPDQWLFDOO\ULFK GHVFULSWLRQV LQWURGXFH DQ H[WUD OD\HU RI
DEVWUDFWLRQ FDSWXULQJ WKH NQRZOHGJH WKDW GZHOOV LQ SROLFLHV
7KH UXOHV WKDW LPSOHPHQW WKHVH SROLFLHV FDQ WKHQ EH
JHQHUDWHG IURP WKLV NQRZOHGJH DXWDPDWLFDOO\ DQG FDQ EH
H[SUHVVHGXVLQJDQ\VXLWDEOHV\QWDFWLFGHVFULSWLRQODQJXDJH
HQIRUFHPHQWPHFKDQLVPV7KLVVHFWLRQSURYLGHVDQRYHUYLHZ 7KLV EULQJV DERXW WKH IROORZLQJ DGYDQWDJHV L LWSDYHV WKH
RI H[LVWLQJ IRUPDOLVPV IRU GHFODUDWLYHO\ UHSUHVHQWLQJ ZD\IRUWKHFRQVWUXFWLRQRISROLF\HQIRUFHPHQWPHFKDQLVPV
SROLFLHV2XURYHUYLHZLVQRWOLPLWHGWRVHFXULW\SROLFLHVEXW DEOH WR UHDVRQ DERXW SROLF\ FRPSOLDQFH JHQHULFDOO\ DQG
FRQVLGHUVSROLFLHVLQJHQHUDO RUWKRJRQDOO\ WR DQ\ SDUWLFXODU V\QWDFWLF UHSUHVHQWDWLRQ RI
SROLF\UXOHVLLLWHQDEOHVWKHHVWDEOLVKPHQWRIDVVRFLDWLRQV
A. Syntactic Policy Description EHWZHHQ RSHUDWLRQDOOHYHO SROLFLHV WR RWKHU SROLFLHV DW WKH
6\QWDFWLF GHVFULSWLRQV ZHUH LQWURGXFHG DORQJ ZLWK WKH VDPHRUKLJKHUVWUDWHJLFOHYHORIDEVWUDFWLRQWKXVHQDEOLQJ
6HUYLFH 2ULHQWHG $UFKLWHFWXUH 62$ PRGHO DV SDUW RI D WKH LGHQWLILFDWLRQ RI LQWHUSROLF\ UHODWLRQV VXFK DV
VWDQGDUGLVDWLRQ HIIRUW DLPLQJ SULPDULO\ DW IDFLOLWDWLQJ LQFRQVLVWHQW SROLFLHV DQG RYHUODSSLQJ SROLFLHV 6XFK
LQWHURSHUDEOHGDWDH[FKDQJHVLQLQWHUDFWLRQV,QWKHUHDOPRI UHODWLRQV DUH LPSRUWDQW DV WKH\ PD\ OHDG WR HUURQHRXV
SROLFLHVDQGSROLF\EDVHGDSSOLFDWLRQVV\QWDFWLFGHVFULSWLRQV GHFLVLRQV HJ LQ WKH FDVH RI FRQIOLFWLQJ SROLFLHV RU PD\
SURPRWH D GHFODUDWLYH DSSURDFK WR SROLF\ H[SUHVVLRQ RQH GHJUDGHV\VWHPSHUIRUPDQFHHJLQWKHFDVHRIRYHUODSSLQJ
ZKLFK DLPV DW UHSODFLQJ D WUHQG ZKHUHE\ SROLFLHV DUH SROLFLHV LLL  LW SURPRWHV WKH SRUWDELOLW\ YLVLELOLW\ DQG
HQFRGHG LPSHUDWLYHO\ DV SDUW RI WKH VDPH VRIWZDUH WKDW UHXVDELOLW\ RI SROLFLHV LY LW IDFLOLWDWHV SROLF\ XSGDWHV DQG
FKHFNVIRUWKHLUFRPSOLDQFH PDLQWHQDQFHDQGKHQFHSROLF\JRYHUQDQFH
6HYHUDO PDUNXS ODQJXDJHV KDYH EHHQ SURSRVHG IRU WKH ,Q>@WKHDXWKRUVSUHVHQWHG.$R6DJHQHUDOSXUSRVH
GHFODUDWLYHGHVFULSWLRQRISROLFLHVVRPHSURPLQHQWH[DPSOHV SROLF\ PDQDJHPHQW IUDPHZRUN ZKLFK H[KLELWV D WKUHH
EHLQJ 5XOH0/ >@ ;$&0/ >@ 6$0/ >@ DQG :6 OD\HUHGDUFKLWHFWXUHFRPSULVLQJLDKXPDQLQWHUIDFHOD\HU
7UXVW >@ 7KHVH SURYLGH ;0/EDVHG V\QWD[HV IRU ZKLFKSURYLGHVDJUDSKLFDOLQWHUIDFHIRUSROLF\VSHFLILFDWLRQ

592
586
LQ QDWXUDO ODQJXDJH LL D SROLF\ PDQDJHPHQW OD\HU ZKLFK SROLFLHV WKDWWKHVHDUHDPHQDEOHWR,QDGGLWLRQ WKHUHOLDQFH
XVHV2:/WRHQFRGHDQGPDQDJHSROLF\UHODWHGNQRZOHGJH RI WKHVH DSSURDFKHV RQ 2:/ GHVSLWH WKH REYLRXV EHQHILWV
LLL D SROLF\ PRQLWRULQJ DQG HQIRUFHPHQW OD\HU ZKLFK
DXWRPDWLFDOO\ JURXQGV 2:/ SROLFLHV WR D SURJUDPPDWLF
IRUPDW VXLWDEOH IRU SROLF\EDVHG PRQLWRULQJ DQG SROLF\
HQIRUFHPHQW ,Q >@ WKH DXWKRUV SURSRVHG 5HL  D SROLF\
VSHFLILFDWLRQODQJXDJHH[SUHVVHGLQ2://LWH>@,WDOORZV
WKH GHFODUDWLYH UHSUHVHQWDWLRQ RI D ZLGH UDQJH RI SROLFLHV
ZKLFK FRQWURO ZKLFK DFWLRQV FDQ EH SHUIRUPHG DQG ZKLFK
DFWLRQV VKRXOG EH SHUIRUPHG E\ D VSHFLILF HQWLW\
)XUWKHUPRUHLWGHILQHVDVHWRIFRQFHSWVULJKWVSURKLELWLRQV
VWHPPLQJ IURP WKH ULFK VHW RI SURSHUWLHV WKDW 2:/ RIIHUV
UDLVHVFRQFHUQV DERXW WKH GHJUHH WR ZKLFK WKHVH DSSURDFKHV
DUHOLJKWZHLJKWKHQFHDERXWWKHLUSHUIRUPDQFH
7DNLQJWKHVHILQGLQJVLQWRDFFRXQWZHSODQWRFRQVWUXFWD
QRYHO $%$&EDVHG &$$& PRGHO IRU FDSWXULQJ SROLF\
UHODWHG NQRZOHGJH 7KH PRGHO ZLOO FRQFHSWXDOLVH DOO
FRQWH[WXDO DWWULEXWHV WKDW PXVW EH WDNHQ LQWR DFFRXQW IRU
FRQWUROOLQJ DFFHVV WR LQGLYLGXDO GDWD REMHFWV EDVHG RQ WKHLU
VHQVLWLYLW\ OHYHO ,Q RUGHU WR DYRLG WKH XVH RI EHVSRNH
REOLJDWLRQV DQG GLVSHQDWLRQV IRU VSHFLI\LQJ DQG UHDVRQLQJ
DERXW DFFHVV FRQWURO UXOHV ,Q WKLV UHVSHFW LW SURYLGHV DQ
DEVWUDFWLRQ ZKLFK DOORZV WKH VSHFLILFDWLRQ RI DGHVLUDEOH VHW
RI EHKDYLRXUV ZKLFK DUH SRWHQWLDOO\ XQGHUVWDQGDEOH  KHQFH
HQIRUFHDEOH  E\ D ZLGH UDQJH RI DXWRQRPRXV HQWLWLHV LQ
RSHQ DQG G\QDPLF HQYLURQPHQWV ,Q >@ 32/,&<7$% LV
SURSRVHG IRU VXSSRUWLQJ WUXVW QHJRWLDWLRQ LQ 6HPDQWLF :HE
HQYLURQPHQWV  32/,&<7$% DGYRFDWHV DQ RQWRORJ\EDVHG
DSSURDFKIRUGHVFULELQJSROLFLHVWKDWGULYHDWUXVWQHJRWLDWLRQ
SURFHVV DLPLQJ DW SURYLGLQJ FRQWUROOHG DFFHVV WR :HE
UHVRXUFHV 6XFK SROLFLHV HVVHQWLDOO\ VSHFLI\ WKH FUHGHQWLDOV
WKDW D SDUW\ KDV WR SUHVHQW IRU SHUIRUPLQJ DQ DFWLRQ RQ D
UHVRXUFH RZQHG E\ DQRWKHU SDUW\ $ SOXJLQ IRU WKH 3URWpJp
RQWRORJ\HGLWRULVSURYLGHGWRIDFLOLWDWHSROLF\VSHFLILFDWLRQ
,Q>@WKHDXWKRUVUHFRJQLVHWKDWFORXGFRPSXWLQJDQG
LQ SDUWLFXODU WKH FRQFHSW RI PXOWLWHQDQF\ FDOOV IRU SROLF\
GULYHQ DFFHVV FRQWURO PHFKDQLVPV 1HYHUWKHOHVV WKH
GLIIHUHQW W\SHV RI DFFHVV FRQWURO SROLFLHV WKHLU FRPSOH[
QDWXUHDQGWKHODFNRIHIIHFWLYHSROLF\DQDO\VLVPHFKDQLVPV
RIWHQOHDGWRLQFRQVLVWHQWDQGRURYHUODSSLQJSROLF\VHWVDQG
WKXV WR HUURUSURQH DFFHVV FRQWURO PHFKDQLVPV 7KH\ WKXV
SURSRVH DQ RQWRORJ\EDVHG IUDPHZRUN WR FDSWXUH WKH
FRPPRQVHPDQWLFVDQGVWUXFWXUHRIGLIIHUHQWW\SHVRIDFFHVV
FRQWURO SROLFLHV HJ ;$&0/ SROLFLHV ILUHZDOO SROLFLHV
RQWRORJLHV IRU WKH UHSUHVHQWDWLRQ RI VXFK NQRZOHGJH WKH
PRGHO ZLOO EH H[SUHVVHG LQ /LQNHG 86'/ >@ DQG LQ
SDUWLFXODULQ/LQNHG86'/V6(&SURILOH/LQNHG86'/LVD
OLJKWZHLJKW RQWRORJ\ SURYLGLQJ DQ 5') YRFDEXODU\ IRU WKH
GHVFULSWLRQ RI WKH EXVLQHVV DVSHFWV RI SROLFLHV DQG VHUYLFHV
%\ GUDZLQJ XSRQ ZLGHO\DGRSWHG JHQHUDOSXUSRVHV
YRFDEXODULHV   /LQNHG 86'/ SURPRWHV NQRZOHGJH VKDULQJ
ZKLOVWLQFUHDVLQJWKHLQWHURSHUDELOLW\KHQFHWKHJHQHUDOLW\RI
RXU DSSURDFK ,Q DGGLWLRQ E\ HPEUDFLQJ /LQNHG 'DWD IRU
FDSWXULQJ IDFWV DERXW SHRSOH RUJDQLVDWLRQV UHVRXUFHV DQG
VHUYLFHV/LQNHG86'/SURYLGHVDIOH[LEOHJHQHUDOSXUSRVH
HDVLO\H[WHQVLEOHRQWRORJLFDOIUDPHZRUNWKDWFDQEHWDLORUHG
WR WKH SDUWLFXODU VHFXULW\ QHHGV RI FORXG DSSOLFDWLRQV 2XU
PRGHOZLOOEHXVHGDVSDUWRIWKH3DD6ZRUGIUDPHZRUNDQ
HQYLVDJHG VHFXULW\E\GHVLJQ IUDPHZRUN WKDW ZLOO SURYLGH
VWRUDJH SURWHFWLRQ PHFKDQLVPV IRU LQFUHDVLQJ WKH WUXVW RI
XVHUVRQFORXGDSSOLFDWLRQV>@0RUHVSHFLILFDOO\WKHPRGHO
ZLOO EH XVHG IRU JXLGLQJ D GHYHORSHU LQ GHILQLQJ D VHW RI
HIIHFWLYH DFFHVV FRQWURO DQG RUJDQLVDWLRQDO SROLFLHV LQ WKH
IRUP RI 'DWD $FFHVV 2EMHFW DQQRWDWLRQV LQ WKH SHUVLVWHQFH
OD\HURIFORXGDSSOLFDWLRQV
$&.12:/('*0(17
7KHUHVHDUFKOHDGLQJWRWKHVHUHVXOWVKDVUHFHLYHGIXQGLQJ
HWF DQG IDFLOLWDWH WKH GHWHFWLRQ RI DQRPDOLHV LQ WKHVH IURPWKH(8
V+SURJUDPPHXQGHUJUDQWDJUHHPHQW1R
SROLFLHV 7KH RQWRORJ\ FDSWXUHV WKH XQGHUO\LQJ GRPDLQ
FRQFHSWV LQYROYHG WKH SROLF\ VWUXFWXUH DQG WKH SROLF\
DWWULEXWHV 3DUWLFXODU W\SHV RI DFFHVV FRQWURO SROLFLHV DUH
REWDLQHGE\DSSURSULDWHO\LQVWDQWLDWLQJWKHRQWRORJ\
,9 &21&/86,216$1')8785(:25.
:HKDYHSUHVHQWHGDVWDWHRIWKHDUWDQDO\VLVRIGLIIHUHQW
DSSURDFKHV WR &$$& DQG WR SROLF\ PRGHOOLQJ 5HJDUGLQJ
&$$& WKH H[LVWLQJ 5%$&EDVHG DSSURDFKHV HLWKHU GR QRW
FRYHU DOO UHOHYDQW FRQWH[WXDO HOHPHQWV ZLWK D UHXVDEOH
VHFXULW\ UHODWHG FRQWH[W PRGHO RU DUH SURYHQ KDUG WR
PDLQWDLQLQG\QDPLFHQYLURQPHQWVZKHUHXVHUVRIWHQVZLWFK
UROHV>@2QWKHRWKHUKDQGWKHDFFHVVFRQWUROSROLFLHVWKDW
FDQ EH LPSOHPHQWHG LQ $%$& DUH OLPLWHG RQO\ E\ WKH
FRPSXWDWLRQDO ODQJXDJH DQG WKH ULFKQHVV RI WKH DYDLODEOH
DWWULEXWHV 7KXV WKH\ SUHVHQW WKH DSSURSULDWH IOH[LELOLW\ DQG
G\QDPLFDFFHVVFRQWUROWKDWLVKLJKO\GHVLUDEOHDQGJHQHUDOO\
PLVVLQJLQWKHKHWHURJHQHRXVFORXGFRPSXWLQJGRPDLQ
5HJDUGLQJ SROLF\ PRGHOOLQJ WKH H[LVWLQJ VHPDQWLFDOO\
HQKDQFHG DSSURDFKHVUHO\ RQEHVSRNH QRQVWDQGDUGVEDVHG
RQWRORJLHV IRU WKH UHSUHVHQWDWLRQRI SROLFLHV 7KH\ WKHUHIRUH
WKH3DD6ZRUGSURMHFWZZZSDDVZRUGHX
5()(5(1&(6
>@ /09DTXHUR/5RGHUR0HULQR-&DFHUHVDQG0/LQGQHU
$ EUHDN LQ WKH FORXGV 7RZDUGV D FORXG GHILQLWLRQ
6,*&200&RPSXW&RPPXQ5HYYROQRSS

>@ 7KH 1RWRULRXV 1LQH &ORXG &RPSXWLQJ 7RS 7KUHDWV LQ 
&ORXG6HFXULW\$OOLDQFH
>@ < 9HUJLQDGLV $ 0LFKDODV 3 *RXYDV * 6FKLHIHU *
+EVFK DQG , 3DUDVNDNLV 3DD6ZRUG $ +ROLVWLF 'DWD
3ULYDF\ DQG 6HFXULW\ E\ 'HVLJQ )UDPHZRUN IRU &ORXG
6HUYLFHVLQProceedings of the 5th International Conference
on Cloud Computing and Services Science (CLOSER 2015)
/LVERQ3RUWXJDO
>@ 0 'HFNHU 0RGHOOLQJ RI /RFDWLRQ$ZDUH $FFHVV &RQWURO
5XOHV,*,*OREDO
>@ $ .KDQ $FFHVV FRQWUROLQ FORXG FRPSXWLQJ HQYLURQPHQW
ARPN Journal of Engineering and Applied Sciences, 
>@ 7 /RGGHUVWHGW ' $ %DVLQ DQG - 'RVHU 6HFXUH80/ $
80/%DVHG0RGHOLQJ/DQJXDJHIRU0RGHO'ULYHQ6HFXULW\


6XFKDV6.26KWWSZZZZRUJVNRV)2$)
JHQHUDOO\ ODFN WKH H[SUHVVLYLW\ IRU DGGUHVVLQJ WKH EXVLQHVV KWWSZZZIRDISURMHFWRUJDQG*RRG5HODWLRQV
GHWDLOV RI FORXG DSSOLFDWLRQV DQG WKXV RI WKH DFFHVV FRQWURO KWWSZZZKHSSQHW]GHRQWRORJLHVJRRGUHODWLRQVYKWPO

593
587
 LQIn Proceedings of the 5th International Conference on The
Unified Modeling Language (UML'02)
>@ 1 %RXVWLD DQG $ 0RNKWDUL 5HSUHVHQWDWLRQ DQG 5HDVRQLQJ
RQ 25%$& 'HVFULSWLRQ /RJLF ZLWK 'HIDXOWV DQG
([FHSWLRQVLQ Proceedings of the 2008 Third International
Conference on Availability, Reliability and Security
(ARES'08)
>@ 00R\HUDQG0$KDPDG*HQHUDOL]HG5ROH%DVHG$FFHVV
&RQWURO LQ In Proceedings of the The 21st International
Conference on Distributed Computing Systems (ICDCS'01)

>@ 0 - &RYLQJWRQ : /RQJ 6 6ULQLYDVDQ $ . 'HY 0
$KDPDG DQG * ' $ERZG 6HFXULQJ FRQWH[WDZDUH
DSSOLFDWLRQV XVLQJ HQYLURQPHQW UROHV LQ Proceedings of the
sixth ACM symposium on Access control models and
technologies (SACMAT'01)
>@ *=KDQJDQG03DUDVKDU&RQWH[W$ZDUH'\QDPLF$FFHVV
&RQWURO IRU 3HUYDVLYH $SSOLFDWLRQV LQ Proceedings of the
Communication Networks and Distributed Systems Modeling
and Simulation Conference (CDNS'04)6DQ'LHJR&$86$

>@ 6 0 &KDQGUDQ DQG - % ' -RVKL /R75%$& D ORFDWLRQ
DQG WLPHEDVHG 5%$& PRGHO LQ 3roceedings of the 6th
international conference on Web Information Systems
Engineering (WISE'05)
>@ ' .XONDUQL DQG $ 7ULSDWKL &RQWH[WDZDUH UROHEDVHG
DFFHVV FRQWURO LQ SHUYDVLYH FRPSXWLQJ V\VWHPV LQ
Proceedings of the 13th ACM symposium on Access control
models and technologies (SACMAT'08) 9LHQQD $XVWULD

roceedings of the 2010 IEEE/ACM Int'l Conference on Green
Computing and Communications & Int'l Conference on
Cyber, Physical and Social Computing (GREENCOM-
CPSCOM '10)
>@ +&KHQ7)LQLQDQG$-RVKL6HPDQWLFZHELQWKHFRQWH[W
EURNHU DUFKLWHFWXUH LQ Proceedings of the Second IEEE
International Conference on Pervasive Computing and
Communications (PerCom'04)
>@ +&KHQ7)LQLQDQG$-RVKL7KH6283$2QWRORJ\IRU
3HUYDVLYH&RPSXWLQJLQOntologies for Agents: Theory and
Experiences%LUN+DXVHUSS
>@ &&KRL-&KRLDQG3.LP2QWRORJ\EDVHGDFFHVVFRQWURO
PRGHOIRUVHFXULW\SROLF\UHDVRQLQJLQFORXGFRPSXWLQJThe
Journal of Supercomputing, SS
>@ ;+:DQJ'4=KDQJ7*X+.3XQJ2QWRORJ\EDVHG
FRQWH[WPRGHOLQJDQGUHDVRQLQJXVLQJ2:/In Proceedings
of the 2nd IEEE Annual Conference on Pervasive Computing
and Communications WorkshopsSS
>@ .+HQULFNVHQ-,QGXOVNDDQG$5DNRWRQLUDLQ\0RGHOLQJ
&RQWH[W,QIRUPDWLRQLQ3HUYDVLYH&RPSXWLQJ6\VWHPVLQIn
Proceedings of the First International Conference on
Pervasive Computing (Pervasive'02)
>@ / &RVWDEHOOR 6 9LOODWD DQG ) *DQGRQ &RQWH[W$ZDUH
$FFHVV&RQWUROIRU5')*UDSK6WRUHVLQIn Proceedings of
the 20th European Conference on Artificial Intelligence
(ECAI'12)
>@ 6SHFLILFDWLRQRI'HOLEHUDWLRQ5XOH0/>2QOLQH@
$YDLODEOH
KWWSZLNLUXOHPORUJLQGH[SKS6SHFLILFDWLRQBRIB'HOLEHUDWLR
QB5XOH0/B>$FFHVVHG6HSWHPEHU@
>@ = +H / :X + /L + /DL = +RQJ 6HPDQWLFVEDVHG >@ H;WHQVLEOH $FFHVV &RQWURO 0DUNXS /DQJXDJH ;$&0/
DFFHVV FRQWURO DSSURDFKIRU ZHE VHUYLFH -&3   9HUVLRQ   -DQXDU\  >2QOLQH@ $YDLODEOH
 KWWSGRFVRDVLVRSHQRUJ[DFPO[DFPOFRUHVSHFRV
>@ $ 7RQLQHOOL 5 0RQWDQDUL / .DJDO DQG 2 /DVVLOD $ HQKWPO>$FFHVVHG6HSWHPEHU@
VHPDQWLF FRQWH[WDZDUH DFFHVV FRQWURO IUDPHZRUN IRU VHFXUH
FROODERUDWLRQV LQ SHUYDVLYH FRPSXWLQJ HQYLURQPHQWV LQ
Proceedings of the 5th international conference on The
Semantic Web (ISWC'06)
>@ $60.D\HV-+DQDQG$&ROPDQ$Q2QWRORJ\%DVHG
$SSURDFK WR &RQWH[W$ZDUH $FFHVV &RQWURO IRU 6RIWZDUH
6HUYLFHV LQ Proceedings of the Web Information Systems
Engineering (WISE'13)
>@ - -UMHQV 7RZDUGV GHYHORSPHQW RI VHFXUH V\VWHPV XVLQJ
80/VHFLQProceedings of the 4th International Conference
on Fundamental Approaches to Software Engineering
(FASE'01)
>@ (%HUWLQR&%HWWLQL()HUUDULDQG36DPDUDWL$WHPSRUDO
DFFHVV FRQWURO PHFKDQLVP IRU GDWDEDVH V\VWHPV IEEE
Transactions on Knowledge and Data Engineering, SS

>@ 9&+X')HUUDLROR5.XKQ$6FKQLW]HU.6DQGOLQ5
0LOOHU DQG . 6FDUIRQH *XLGH WR $WWULEXWH %DVHG $FFHVV
>@ 6HFXULW\ $VVHUWLRQV 0DUNXS /DQJXDJH 6$0/ 9HUVLRQ 
7HFKQLFDO 2YHUYLHZ  0DUFK  >2QOLQH@ $YDLODEOH
KWWSVZZZRDVLV
RSHQRUJFRPPLWWHHVGRZQORDGSKSVVWFVDPOWHFK
RYHUYLHZFGSGI>$FFHVVHG6HSWHPEHU@
>@ :67UXVW   0DUFK  >2QOLQH@ $YDLODEOH
KWWSGRFVRDVLVRSHQRUJZVV[ZVWUXVWZVWUXVW
RVGRF>$FFHVVHG6HSWHPEHU@
>@ $ 8V]RN - %UDGVKDZ 5 -HIIHUV 0 -RKQVRQ $ 7DWH -
'DOWRQ DQG 6 $LWNHQ .$R6 3ROLF\ 0DQDJHPHQW IRU
6HPDQWLF:HE6HUYLFHVIEEE Intel. Sys., YROQRSS

>@ / .DJDO 7 )LQLQ DQG $ -RVKL $ 3ROLF\ /DQJXDJH IRU D
3HUYDVLYH &RPSXWLQJ (QYLURQPHQW LQ 4th IEEE Int.
Workshop on Policies for Distributed Systems and Networks
(POLICY '03)
>@ : 1HMGO ' 2OPHGLOOD 0 :LQVOHWW DQG & & =KDQJ
2QWRORJ\%DVHG SROLF\ VSHFLILFDWLRQ DQG PDQDJHPHQW LQ
&RQWURO$%$&'HILQLWLRQDQG&RQVLGHUDWLRQV1,67
>@ 5 %KDWWL ( %HUWLQR DQG $ *KDIRRU $ 7UXVWEDVHG
&RQWH[W$ZDUH $FFHVV &RQWURO 0RGHO IRU :HE6HUYLFHV
Journal of Distributed and Parallel Databases, SS 

>@ $ &RUUDGL 5 0RQWDQDUL DQG ' 7LEDOGL &RQWH[WEDVHG
DFFHVV FRQWURO PDQDJHPHQW LQ XELTXLWRXV HQYLURQPHQWV LQ
Proceedings of the Network Computing and Applications,
Third IEEE International Symposium (NCA'04)
>@ 5-+XOVHERVFK$+6DOGHQ06%DUJK3:*(EEHQ
DQG - 5HLWVDP &RQWH[W VHQVLWLYH DFFHVV FRQWURO LQ
Proceedings of the tenth ACM symposium on Access control
models and technologies (SACMAT'05)
>@ $ Y &OHHII : 3LHWHUV DQG 5 :LHULQJD %HQHILWV RI
/RFDWLRQ%DVHG $FFHVV &RQWURO $ /LWHUDWXUH 6WXG\ LQ
594
588
Gmez-Prez, A. and Euzenat, J. (eds.) ESWC'05
>@ + +X *- $KQ DQG . .XONDUQL 2QWRORJ\EDVHG SROLF\
DQRPDO\ PDQDJHPHQW IRU DXWRQRPLF FRPSXWLQJ LQ 7th
International Conference on Collaborative Computing:
Networking, Applications and Worksharing
(CollaborateCom)
>@ 7 *UXEHU 7RZDUGV SULQFLSOHV IRU WKH GHVLJQ RI RQWRORJLHV
XVHGIRUNQRZOHGJHInternational Journal Human-Computer
Studies, YROQRSS
>@ 2:/ :HE 2QWRORJ\ /DQJXDJH 5HIHUHQFH :&
5HFRPPHQGDWLRQ    >2QOLQH@ $YDLODEOH
KWWSZZZZRUJ75RZOUHI >$FFHVVHG  6HSWHPEHU
@
>@ /LQNHG 86'/ >2QOLQH@ $YDLODEOH KWWSOLQNHGXVGORUJ
>$FFHVVHG6HSWHPEHU@