FRABAC: a new hybrid access control model for the heterogeneous multi-domain systems
by Hasiba Ben Attia; Laid Kahloul; Saber Benharzallah
International Journal of Management and Decision Making (IJMDM), Vol. 17, No. 3, 2018

Abstract: In this paper, a new hybrid, flexible, scalable and fine-grained model, fine-grained role-attribute access control (FRABAC) is proposed. FRABAC combines the benefits of the two most popular basic models: role-based access control (RBAC) and attribute-based access control (ABAC). The new proposed model overcomes the shortcomings of both models RBAC and ABAC known as combinatorial explosion in rules and roles when the security policy becomes complicated. Besides avoiding the combinatorial explosion, the new proposed model provides a role permission agreement (APA) to handle inter organisational access decision in collaborative cloud services cases. The proposed model is applied to define the security policies in realistic case studies and results are compared to previous existing models. On the other hand, the consistency and the correctness of the built policies are analysed through a formal modelling/analysis approach. This formal approach uses hierarchical coloured Petri nets (HCPNs) to model the policy and the CPN-tools to analyse the generated models.

Online publication date: Thu, 26-Jul-2018

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Management and Decision Making (IJMDM):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com