基于信任度与策略相似度的访问策略合成研究

Research on Access Policy Synthesis Based on Trust and Policy Similarity

针对云计算跨域访问策略合成的自动化问题,以实现策略合成双方对聚合资源的保护需求,提出一种云计算环境下基于主体信任度属性和策略相似性合并的自动算子选择机制。通过引入主体信任度属性的相似度来简化复杂的主体信任度计算。同时引入弱一致性算子、异常算子、首次匹配算子对原有的策略合成算子进行扩充,给出了扩充算子的策略合成机制及选择方法,其次,对原有的访问控制策略相似性计算方法进行了改进,以消除合成策略当中的策略冗余。最后通过实验验证了策略相似度分析算法的性能及有效性。

Aiming at the automation problem of cross-domain access policy synthesis in cloud computing,an automatic operator selection mechanism based on principal trust attribute and policy similarity merging in cloud computing environment is proposed to realize the protection needs of both sides of policy synthesis to aggregate resources.By introducing the similarity of principal trust attribute,the complex principal trust calculation is simplified.At the same time,weak consistency operator,anomaly operator and first matching operator are introduced to extend the original policy synthesis operator,and the policy synthesis mechanism and selection method of the extended operator are given.Secondly,the original access control policy similarity calculation method is improved to eliminate the policy redundancy in the synthesis strategy.Finally,the performance and effectiveness of the strategy similarity analysis algorithm are verified by experiments.