Permission clustering-based attribute value optimization

Wenchao WU; Zhiyu REN; Xuehui DU

doi:10.11959/j.issn.2096-109x.2021077

您当前的位置：

首页 >

文章列表页 >

Permission clustering-based attribute value optimization

Papers | 更新时间：2024-06-03

- Permission clustering-based attribute value optimization
- Chinese Journal of Network and Information Security Vol. 7, Issue 4, Pages: 175-182(2021)
- 作者机构：
  
  1. 信息工程大学，河南郑州 450001
  2. 中国人民解放军31668部队，青海西宁 810000
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021077
  CLC： TP393
- Online First：2021-08，
  
  Published：15 August 2021
- 稿件说明：
移动端阅览
Wenchao WU, Zhiyu REN, Xuehui DU. Permission clustering-based attribute value optimization[J]. Chinese Journal of Network and Information Security, 2021, 7(4): 175-182.
DOI：

Wenchao WU, Zhiyu REN, Xuehui DU. Permission clustering-based attribute value optimization[J]. Chinese Journal of Network and Information Security, 2021, 7(4): 175-182. DOI： 10.11959/j.issn.2096-109x.2021077.

摘要

在新型大规模计算环境下应用ABAC（基于属性的访问控制）面临着属性数量多、来源复杂、质量参差不齐、难以人工修正、难以直接应用于访问控制的问题。针对属性标称值的优化问题，设计了一种基于权限聚类的属性值优化算法，通过将实体表示成对应的权限集合，对实体进行基于密度的聚类，为实体赋予权限对应的类别标签，而后基于粗糙集理论对属性值进行化简与修正。最后在 UCI 公开数据集上对算法进行了验证，证明应用该算法后，ABAC策略挖掘在真阳性率和F1得分上均具有较大的提升。

Abstract

In new large-scale computing environment

the attributes of entities were massive and they had complex sources and uneven quality

which were great obstacles to the application of ABAC (attribute-based access control).The attributes were also hard to be corrected manually

making it difficult to be applied in access control system straightly.To solve the optimization problem of nominal attributes

a novel algorithm of attribute value optimization based on permission clustering was designed

in which entities were presented by the privilege set related to them.So that the entities were tagged by density-based clustering method with distances of their privilege set presentations.Then the attribute values were reduced and corrected based on rough set theory.Finally

the algorithm was verified on UCI data sets

which proved that after applying it

ABAC policy mining was improved in the evaluation criteria

such as the true positive rate and F1-score.

关键词

Keywords

references

房梁 , 殷丽华 , 郭云川 , 等 . 基于属性的访问控制关键技术研究综述 [J ] . 计算机学报 , 2017 , 40 ( 7 ): 1680 - 1698 .

FANG L , YIN L H , GUO Y C , et al . A survey of key technologies in attribute-based access control scheme [J ] . Chinese Journal of Computers , 2017 , 40 ( 7 ): 1680 - 1698 .

HU C T , FERRAIOLO D F , KUHN D R , et al . Guide to attribute based access control (ABAC) definition and considerations[includes updates as of 02-25-2019] [R ] . 2019 .

XU Z , STOLLER S D . Mining attribute-based access control policies from logs [C ] // IFIP Annual Conference on Data and Applications Security and Privacy . 2014 : 276 - 291 .

COTRINI C , WEGHORN T , BASIN D . Mining ABAC rules from sparse logs [C ] // 2018 IEEE European Symposium on Security and Privacy (EuroS＆P) . 2018 : 31 - 46 .

IYER P , MASOUMZADEH A . Mining positive and negative attribute-based access control policy rules [C ] // Proceedings of the 23nd ACM on Symposium on Access Control Models and Technologies . 2018 : 161 - 172 .

张任伟 , 白晓颖 , 郁莲 , 等 . 决策表的属性约简算法综述 [J ] . 计算机科学 , 2011 , 38 ( 11 ): 1 - 6 .

ZHANG R W , BAI X Y , YU L , et al . Survey of decision table research of attribute reduction [J ] . Computer Science , 2011 , 38 ( 11 ): 1 - 6 .

邓大勇 , 薛欢欢 , 苗夺谦 , 等 . 属性约简准则与约简信息损失的研究 [J ] . 电子学报 , 2017 , 45 ( 2 ): 401 - 407 .

DENG D Y , XUE H H , MIAO D Q , et al . Study on criteria of attribute reduction and information loss of attribute reduction [J ] . Acta Electronica Sinica , 2017 , 45 ( 2 ): 401 - 407 .

邓大勇 , 葛雅雯 , 黄厚宽 . 属性约简簇的优化选择 [J ] . 电子学报 , 2019 , 47 ( 5 ): 1111 - 1120 .

DENG D Y , GE Y W , HUANG H K . An optimizing selection in a family of attribute reducts [J ] . Acta Electronica Sinica , 2019 , 47 ( 5 ): 1111 - 1120 .

张维 , 苗夺谦 , 高灿 , 等 . 一种处理部分标记数据的粗糙集属性约简算法 [J ] . 计算机科学 , 2017 , 44 ( 1 ): 25 - 31 .

ZHANG W , MIAO D Q , GAO C , et al . Rough set attribute reduction algorithm for partially labeled data [J ] . Computer Science , 2017 , 44 ( 1 ): 25 - 31 .

曾孝文 , 胡虚怀 , 严权峰 . 一种基于粗糙集理论的属性值约简改进算法 [J ] . 电子技术 , 2017 ( 1 ): 1 .

ZENG X W , HU X H , YAN Q F . An improved algorithm for attribute value reduction base on rough set theory [J ] . Electronics Technology , 2017 ( 1 ): 1 .

TAN P N , STEINBACH M , KUMAR V . Introduction to data mining [M ] . Pearson Education India , 2016 :21.

LICHMAN M . UCI machine learning repository.amazon access samples data set [EB ] . 2011 .

BORGELT C . Frequent item set mining [J ] . Wiley Interdisciplinary Reviews:Data Mining and Knowledge Discovery , 2012 , 2 ( 6 ): 437 - 456 .

Views

177

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Key-customizable encrypted deduplication with access control for cloud storage

Scenario-aware access control model

Credible distributed identity authentication system of microgrid based on blockchain

Research progress of access control based on blockchain

Efficient and secure multi-user outsourced image retrieval scheme with access control

Related Author

YU Nenghai

LI Weihai

XU Zikai

GU Bolun

Xuehui DU

Dibin SHAN

Wenjuan WANG

Na WANG

Related Institution

School of Cyber Science and Technology, University of Science and Technology of China

Anhui Province Key Laboratory of Digital Security

Information ＆ Telecommunications Company.State Grid Shandong Electric Power Company, Ji'nan

Shandong Luruan Digital Technology Co., LTD, Ji'nan

College of Computer Science and Electronic Engineering, Hunan University

⁰