Yang Mian, Atluri Vijayalakshmi, Sural Shamik, Vaidya Jaideep
Rutgers University, Newark, USA.
Indian Institute of Technology Kharagpur, India.
Data Appl Secur Priv XXXII (2024). 2024 Jul;14901:3-23. doi: 10.1007/978-3-031-65172-4_1. Epub 2024 Jul 13.
In the realm of access control mechanisms, Attribute-Based Access Control (ABAC) stands out for its dynamic and fine-grained approach, enabling permissions to be allocated based on attributes of subjects, objects, and the environment. This paper introduces a graph model for ABAC, named . The leverages directional flow capacities to enforce access control policies, mapping the potential pathways between a subject and an object to ascertain access rights. Furthermore, graph based modeling of ABAC enables the utilization of readily available commercial graph database systems to implement ABAC. As a result, enforcement and analyses of ABAC can be accomplished simply through graph queries. In particular, we demonstrate this using the Neo4j graph database and present the performance of executing enforcement and different analyses queries.
在访问控制机制领域，基于属性的访问控制（ABAC）因其动态且细粒度的方法而脱颖而出，它能够根据主体、客体和环境的属性来分配权限。本文介绍了一种用于ABAC的图模型，名为 。该 利用定向流容量来实施访问控制策略，通过映射主体与客体之间的潜在路径来确定访问权限。此外，基于图的ABAC建模能够利用现成的商业图数据库系统来实现ABAC。因此，ABAC的实施和分析可以通过简单的图查询来完成。特别是，我们使用Neo4j图数据库对此进行了演示，并展示了执行实施和不同分析查询的性能。
