conflict-related rules detection toolfor access control policy用于访问控制策略冲突相关规则检测工具.pdfVIP

A-RelatedRulesDetectionTool

forAccessControl

XiaoyanLiang,LiangshuangLv,ChunheXia,YangLuo,andYazhuoLi

KeyLaboratoryofBeijinworkTechnology

SchoolofComputerScienceandEngineering,BeihangUniversity,Beijing,

lxy@,{lls,xch}@,

veotax@,lyzalexandra@126.com

.detectionisanimportsueoftheAccessControl.

Mostdetectiontoolsmainlyfocusonthetworulesthathavecontraryac-

tions,buttherearealsootherruleswhicharenecessarytothesituation,

whichisnotconsideredinthesetools.Thispaperdefinesalltheserulesrelatedto

thesituationastheconcept“-relatedrules”,andgivesacon-

flict-relatedrulesdetectiontoolforAccessControlwhichcanreportthe

situationmorecomprehensively.Bygivingthesemanticsmodelofthe

accesscontrolandthedefinitionof,weprovethenecessaryand

sufficientconditionof,andthengivetheconceptof“-relatedrules”

anddeduceittension.Weimplement-relatedrulesdetectiontoolbased

onthedescriptionlogic,andtheexperimentresultsvalidatethetool’scorrectness

andeffectiveness.Theresultsofthecorrectnesperimentshowedthatinsteadof

detectingthetworuleswithoppositeactionsonly,itdetectedallthe-related

rulesforaccesscontrol;theresultsoftheeffectivenesperimentshowed

thatourtool’sresponseperformanceisbetterthanbasedtools.

Keywords:Accesscontrol,detect,