云平台访问控制自适应风险评估指标权重分配方法

doi:10.11772/j.issn.1001-9081.2017122940

计算机应用 ›› 2018, Vol. 38 ›› Issue (6): 1614-1619.DOI: 10.11772/j.issn.1001-9081.2017122940

云平台访问控制自适应风险评估指标权重分配方法

杨宏宇, 宁宇光

中国民航大学计算机科学与技术学院, 天津 300300

收稿日期:2017-12-15 修回日期:2018-02-07 出版日期:2018-06-10 发布日期:2018-06-13
通讯作者: 杨宏宇
作者简介:杨宏宇(1969-),男,吉林长春人,教授,博士,CCF会员,主要研究方向:网络信息安全;宁宇光(1991-),男,四川攀枝花人,硕士研究生,主要研究方向:网络信息安全。
基金资助:
中国民航科技基金资助项目（MHRD201205）。

Adaptive weight allocation method of risk assessment index for access control of cloud platform

YANG Hongyu, NING Yuguang

College of Computer Science and Technology, Civil Aviation University of China, Tianjin 300300, China

Received:2017-12-15 Revised:2018-02-07 Online:2018-06-10 Published:2018-06-13
Supported by:
This work is partially supported by the Science and Technology Foundation of Civil Aviation of China (MHRD201205).

摘要/Abstract

摘要： 针对云平台风险访问控制模型中风险评估指标权重主观设定且固定的问题，提出自适应风险评估指标权重分配方法。首先，通过带约束的多元线性回归设计自适应风险评估指标权重分配模型；然后，提出并优化配方回归算法求解相应权重；最后，构建带有自适应权重分配的风险值量化公式，动态计算访问请求的风险值。实验结果表明，该方法与动态风险访问控制（DRAC）模型、基于系统安全风险的访问控制模型相比，在训练集数量级相同的条件下，其风险值的准确率和灵敏度平均提升了2.8%和18.5%、1.7%和18.7%。该方法与DRAC模型、基于动态属性的风险感知访问控制（DA-RAAC）模型以及基于系统安全风险的访问控制模型相比，在访问请求数量相同的条件下，响应时间平均缩短了9.2%、34.6%和96.6%。所提方法在大并发用户数情况下所得风险值有较高的准确率和灵敏度，且响应时间更短，更适用于云环境。

关键词: 访问控制, 指标权重, 配方回归, 自适应, 云平台

Abstract: Aiming at the subjective and fixed setting problems of risk assessment index weight in risk access control model of cloud platform, an adaptive weight allocation method of risk assessment index was proposed. Firstly, the the adaptive weight allocation model of risk assessment index was designed through a multivariate linear regression with constraints. Secondly, the programming regression algorithm was proposed and optimized to solve the corresponding weight. Finally, the quantitative formula of risk value with adaptive weight allocation was constructed to calculate the risk value of access request dynamically. The experimental results show that, compared with the Dynamic Risk-based Access Control (DRAC) model and the access control model based on system security risk, the accuracy and sensitivity of risk value of the proposed method are averagely increased by 2.8% and 18.5%, 1.7% and 18.7% with the same order of magnitude training set. Compared with the DRAC model, Dynamic Attribute-based Risk Aware Access Control (DA-RAAC) model and the access control model based on system security risk, the response time of the proposed method is averagely shortened by 9.2%, 34.6% and 96.6% with the same number of access requests. The proposed method has higher accuracy and sensitivity in the risk value of large concurrent users, and its response time is shorter, which is more suitable for cloud environment.

Key words: access control, index weight, programming regression, adaptability, cloud platform

中图分类号:

TP393

杨宏宇, 宁宇光. 云平台访问控制自适应风险评估指标权重分配方法[J]. 计算机应用, 2018, 38(6): 1614-1619.

YANG Hongyu, NING Yuguang. Adaptive weight allocation method of risk assessment index for access control of cloud platform[J]. Journal of Computer Applications, 2018, 38(6): 1614-1619.

参考文献

[1] 张玉清,王晓菲,刘雪峰,等.云计算环境安全综述[J].软件学报,2016,27(6):1328-1348.(ZHANG Y Q, WANG X F, LIU X F, et al. Survey on cloud computing security[J]. Journal of Software, 2016, 27(6):1328-1348.)
[2] 李昊,张敏,冯登国,等.大数据访问控制研究[J].计算机学报,2017,40(1):72-91.(LI H, ZHANG M, FENG D G, et al. Research on access control of big data[J]. Chinese Journal of Computers, 2017, 40(1):72-91.)
[3] DÍAZ-LÓPEZ D, DÓLERA-TORMO G, GÓMEZ-MÁRMOL F, et al. Dynamic counter-measures for risk-based access control systems:an evolutive approach[J]. Future Generation Computer Systems, 2016, 55(C):321-335.
[4] CHENG P C, ROHATGI P, KESER C, et al. Fuzzy multi-level security:an experiment on quantified risk-adaptive access control[C]//SP'07:Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway, NJ:IEEE, 2007:222-230.
[5] NI Q, BERTINO E, LOBO J. Risk-based access control systems built on fuzzy inferences[C]//ASIACCS'10:Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security. New York:ACM, 2010:250-260.
[6] LAKSHMI H, NAMITHA S, SEEMANTHINI, et al. Risk based access control in cloud computing[C]//ICGCIoT 2015:Proceedings of the 2015 International Conference on Green Computing and Internet of Things. Piscataway, NJ:IEEE, 2015:1502-1505.
[7] BOUCHAMI A, GOETTELMANN E, PERRIN O, et al. Enhancing access-control with risk-metrics for collaboration on social cloud-platforms[C]//TRUSTCOM 2015:Proceedings of the 2015 IEEE Trustcom/BigDataSE/ISPA. Piscataway, NJ:IEEE, 2015:864-871.
[8] CHEN A, XING H W, SHE K, et al. A dynamic risk-based access control model for cloud computing[C]//Proceedings of the 2016 IEEE International Conferences on Big Data and Cloud Computing (BDCloud), Social Computing and Networking (SocialCom), Sustainable Computing and Communications (SustainCom) (BDCloud-SocialCom-SustainCom). Piscataway, NJ:IEEE, 2016:579-584.
[9] 匡亚岚.云环境下数据安全存储技术的研究与实现[D].成都:电子科技大学,2016:35-45.(KUANG Y L. Research and implementation of data security storage technology in cloud environment[D]. Chengdu:University of Electronic Science and Technology of China, 2016:35-45.)
[10] RAY I, RAY I. Trust-based access control for secure cloud computing[EB/OL].[2017-11-16]. http://www.docin.com/p-1156555483.html.
[11] 陆悠,罗军舟,李伟,等.面向网络状态的自适应用户行为评估方法[J].通信学报,2013,34(7):71-80.(LU Y, LUO J Z, LI W, et al. Adaptive user behavior's evaluation method based on network status[J]. Journal on Communications, 2013, 34(7):71-80.)
[12] 周丽.基于模糊灰色关联分析的信息安全风险评估模型研究[D].重庆:西南大学,2013:17-33.(ZHOU L. Research on information security risk assessment model based on fuzzy grey relational analysis[D]. Chongqing:Southwest University, 2013:17-33.)
[13] 熊金石,秦洪涛,李建华,等.基于信息熵的安全风险评估指标权重确定方法[J].系统科学学报,2013,21(2):82-84,89.(XIONG J S, QIN H T, LI J H, et al. Method of determining index weight in security risk evaluation based on information entropy[J]. Journal of System Science, 2013, 21(2):82-84, 89.)
[14] 方开泰,王东谦,吴国富.一类带约束的回归——配方回归[J].计算数学,1982,4(1):57-69.(FANG K T, WANG D Q, WU G F. A class of constrainted regression - programming regression[J]. Mathematica Numerica Sinica, 1982, 4(1):57-69.)
[15] ALUVALU R K, MUDDANA L. A Dynamic Attribute-based Risk Aware Access Control model (DA-RAAC) for cloud computing[C]//ICCIC 2016:Proceedings of the 2016 IEEE International Conference on Computational Intelligence and Computing Research. Piscataway, NJ:IEEE, 2016:1-5.

云平台访问控制自适应风险评估指标权重分配方法

Adaptive weight allocation method of risk assessment index for access control of cloud platform

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	陈俊, 何庆. 基于余弦相似度的改进蝴蝶优化算法[J]. 计算机应用, 2021, 41(9): 2668-2677.
[2]	葛纪红, 沈韬. 基于区块链的能源数据访问控制方法[J]. 计算机应用, 2021, 41(9): 2615-2622.
[3]	李辉, 吴传生, 刘俊, 刘文. 基于梯度曲面面积与稀疏约束的图像平滑方法[J]. 计算机应用, 2021, 41(7): 2039-2047.
[4]	侯笑晗, 金国栋, 谭力宁, 薛远亮. 基于自适应和最优特征的合成孔径雷达舰船检测方法[J]. 计算机应用, 2021, 41(7): 2150-2155.
[5]	刘双元, 郑王里, 林云汉. 面向三维特征描述子的自适应二进制简化方法[J]. 计算机应用, 2021, 41(7): 2062-2069.
[6]	杜心雨, 王化群. LTE-A网络中基于动态组的有效的身份认证和密钥协商方案[J]. 计算机应用, 2021, 41(6): 1715-1722.
[7]	蔡瑞光, 张德生, 肖燕婷. 参数独立的加权局部均值伪近邻分类算法[J]. 计算机应用, 2021, 41(6): 1694-1700.
[8]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[9]	林筠超, 万源. 基于图结构优化的自适应多度量非监督特征选择方法[J]. 计算机应用, 2021, 41(5): 1282-1289.
[10]	王治和, 常筱卿, 杜辉. 基于万有引力的自适应近邻传播聚类算法[J]. 计算机应用, 2021, 41(5): 1337-1342.
[11]	李杏峰, 黄玉清, 任珍文, 李毅红. 基于自适应邻域的鲁棒多视图聚类算法[J]. 计算机应用, 2021, 41(4): 1093-1099.
[12]	张康, 陈建平. 复杂环境下基于采样空间自调整的航迹规划算法[J]. 计算机应用, 2021, 41(4): 1207-1213.
[13]	包玉龙, 朱雪阳, 张文辉, 孙鹏飞, 赵颖琪. 物联网应用中访问控制智能合约的形式化验证[J]. 计算机应用, 2021, 41(4): 930-938.
[14]	黄思远, 张敏情, 柯彦, 毕新亮. 基于显著性检测的图像隐写分析方法[J]. 计算机应用, 2021, 41(2): 441-448.
[15]	欧跃发, 杨鸣坤, 慕德俊, 柯捷, 马文涛. 基于广义最大Versoria准则的稀疏自适应滤波算法[J]. 《计算机应用》唯一官方网站, 2021, 41(11): 3325-3331.