An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment
Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particu...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Published: |
Multidisciplinary Digital Publishing Institute
2021
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/95825/ |
| _version_ | 1848862230088515584 |
|---|---|
| author | Teo, Poh Kuang Ibrahim, Hamidah Sidi, Fatimah Udzir, Nur Izura Alwan, Ali Amer |
| author_facet | Teo, Poh Kuang Ibrahim, Hamidah Sidi, Fatimah Udzir, Nur Izura Alwan, Ali Amer |
| author_sort | Teo, Poh Kuang |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particularly among organizations of a distributed environment. Existing policy evaluation engines employ a simple string equal matching function in evaluating the similarity between the attribute values of a request and a policy, which are inaccurate, since only exact match is considered similar. This work proposes several matching functions which are not limited to the string equal matching function that aim to resolve various types of naming heterogeneity. Our proposed solution is also capable of supporting symmetrical architecture applications, in which the organization can negotiate with the users for the release of their resources and properties that raise privacy concerns. The effectiveness of the proposed matching functions on real XACML policies, designed for universities, conference management, and the health care domain, is evaluated. The results show that the proposed solution has successfully achieved higher percentages of Recall and F-measure compared with the standard Sun’s XACML implementation, with our improvement, these measures gained up to 70% and 57%, respectively. |
| first_indexed | 2025-11-15T13:13:43Z |
| format | Article |
| id | upm-95825 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| last_indexed | 2025-11-15T13:13:43Z |
| publishDate | 2021 |
| publisher | Multidisciplinary Digital Publishing Institute |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-958252023-04-03T07:52:53Z http://psasir.upm.edu.my/id/eprint/95825/ An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment Teo, Poh Kuang Ibrahim, Hamidah Sidi, Fatimah Udzir, Nur Izura Alwan, Ali Amer Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particularly among organizations of a distributed environment. Existing policy evaluation engines employ a simple string equal matching function in evaluating the similarity between the attribute values of a request and a policy, which are inaccurate, since only exact match is considered similar. This work proposes several matching functions which are not limited to the string equal matching function that aim to resolve various types of naming heterogeneity. Our proposed solution is also capable of supporting symmetrical architecture applications, in which the organization can negotiate with the users for the release of their resources and properties that raise privacy concerns. The effectiveness of the proposed matching functions on real XACML policies, designed for universities, conference management, and the health care domain, is evaluated. The results show that the proposed solution has successfully achieved higher percentages of Recall and F-measure compared with the standard Sun’s XACML implementation, with our improvement, these measures gained up to 70% and 57%, respectively. Multidisciplinary Digital Publishing Institute 2021 Article PeerReviewed Teo, Poh Kuang and Ibrahim, Hamidah and Sidi, Fatimah and Udzir, Nur Izura and Alwan, Ali Amer (2021) An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment. Symmetry-Basel, 13 (12). art. no. 2394. pp. 1-26. ISSN 2073-8994 https://www.mdpi.com/2073-8994/13/12/2394 10.3390/sym13122394 |
| spellingShingle | Teo, Poh Kuang Ibrahim, Hamidah Sidi, Fatimah Udzir, Nur Izura Alwan, Ali Amer An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title | An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title_full | An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title_fullStr | An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title_full_unstemmed | An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title_short | An effective naming heterogeneity resolution for XACML policy evaluation in a distributed environment |
| title_sort | effective naming heterogeneity resolution for xacml policy evaluation in a distributed environment |
| url | http://psasir.upm.edu.my/id/eprint/95825/ http://psasir.upm.edu.my/id/eprint/95825/ http://psasir.upm.edu.my/id/eprint/95825/ |