FRABAC: a new hybrid access control model for the heterogeneous multi-domain systems

Hasiba Ben Attia, Laid Kahloul and Saber Benharzallah

International Journal of Management and Decision Making, 2018, vol. 17, issue 3, 245-278

Abstract: In this paper, a new hybrid, flexible, scalable and fine-grained model, fine-grained role-attribute access control (FRABAC) is proposed. FRABAC combines the benefits of the two most popular basic models: role-based access control (RBAC) and attribute-based access control (ABAC). The new proposed model overcomes the shortcomings of both models RBAC and ABAC known as combinatorial explosion in rules and roles when the security policy becomes complicated. Besides avoiding the combinatorial explosion, the new proposed model provides a role permission agreement (APA) to handle inter organisational access decision in collaborative cloud services cases. The proposed model is applied to define the security policies in realistic case studies and results are compared to previous existing models. On the other hand, the consistency and the correctness of the built policies are analysed through a formal modelling/analysis approach. This formal approach uses hierarchical coloured Petri nets (HCPNs) to model the policy and the CPN-tools to analyse the generated models.

Keywords: fine-grained access control; hybrid model; flexible model; cloud computing; collaborative cloud services; role-based access control; RBAC; attribute-based access control; ABAC; coloured Petri nets; formal verification; CPN-tool. (search for similar items in EconPapers)
Date: 2018
References: Add references at CitEc
Citations:

Downloads: (external link)
http://www.inderscience.com/link.php?id=93493 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ids:ijmdma:v:17:y:2018:i:3:p:245-278

Access Statistics for this article

More articles in International Journal of Management and Decision Making from Inderscience Enterprises Ltd
Bibliographic data for series maintained by Sarah Parker ().