XACML中策略/规则组合算法优化

Optimize on Policy/Rule Combining Algorithm for XACML

在访问控制领域,基于XACML的组合算法是解决策略/规则冲突的方法,当主体的请求数目达到一定规模后,为了将PDP模块进行评估的时间缩短,势必要考虑该算法的优化问题。在对XACML研究的基础上对XACML的规则组合算法进行了优化。通过模拟程序表明,使用该优化措施后,缩短了PDP进行评估的时间,改善了系统的交互性。

In the field of access control, Combining algorithms based XACML is a method of policy /rule conflict resolution, when the subject＇s requests reach a certain magnitude, it is bound to consider the optimization problem for shorting the period of evaluation with PDP. Based on the study of XACML, this paper optimized the rule combining algorithms. It is show that the optimization measures do shorten the evaluation time of PDP and improved the system＇s interactive capability through simulation testing.