摘要
针对现有RAd AC研究中并不完全满足NSA提议的现状,介绍这种访问控制模型及风险,并在分析、归纳RAdAC核心特征的基础上,提出了RAdAC的抽象模型。此模型不但在策略、输入元素等方面更准确和精细,功能上也有利于知识沉淀与启发调整策略和优化决策,以及实时、交互管理策略。此外,设计RAdAC抽象模型与PBCUC结合的RAdPBCUC模型,从而对决策和执行的全过程都进行控制,使决策和执行都能适应风险。
In view of the present situation that NSA proposal, the access control model and risk existing RAdAC research could not completely meet the is given, and based on analysis and induction of the core features of RAdAC, the abstract model of RAdAC is proposed. This model is more accurate and precise in access control policies and input elements, and also beneficial to getting the knowledge from the past access control decisions and inspiration, making it a more inspiring guide to adjust and optimize policies and access control decisions, and managing policies in real time and interactively. In addition, the RAdPBCUC model, integrated with the abstract model and the PBCUC, is designed to control the whole process of decision making and execution, and also to adapt the risk of decision making and execution.
出处
《通信技术》
2016年第7期890-895,共6页
Communications Technology
