On the Performance of Access Control Policy Evaluation

Abstract

Abstract-There is growing awareness of the need to protect digital resources and services in both corporate and home ICT scenarios. Meanwhile, communication tools tailored for corporations are blurring the line between communication mechanisms and (near) real-time resource sharing. The resulting requirement for near real-time policy-based access control is technically challenging. In a corporate domain, such access control mechanisms must be unobtrusive and comply with strict security objectives. Thus policy evaluation performance needs to be considered while addressing traditional security concerns. This paper discusses policy system design principles that motivate a novel Policy Decision Point (PDP) implementation and associated policy language. These principles are consistent with recent web development techniques designed to improve performance and scalability. Given a modern web development stack comprising a language (Javascript), a framework (Node.js) and a database management system (Redis), the proposition is that significant performance gains can be made. Our performance experiments suggest this is the case when, through various design iterations, our prototype PDP implementation is compared with an established, Java/XACML-based access control PDP implementation. The experiments presented in this paper suggest that newer technologies offer better performance. The analysis suggests that this is because they offer a more efficient data representation and make better use of computing resources.

Implementasi JSON untuk Minimasi Penggunaan Jumlah Kolom Suatu Tabel Pada Database PostgreSQL

“…Memiliki format data yang dapat dipertukarkan dengan struktur built-in data bahasa pemrograman mengurangi kompleksitas dan waktu pemrosesan. Selain itu [3], dasar dari XML juga hadir dalam JSON, jadi tidak ada yang secara signifikan dihilangkan [6].…”

JSON and its use in Semantic Web

“…JSON objects comprise of primarily two data structures: a collection of name-value pairs and an ordered list of values [7].Unlike XML JSON uses closed tags and its objects are analysed as strings instead of DOM which makes it easy to parse and generate codes written in JSON [8]. Moreover, [9] states clearly that all the features of XML are fulfilled by JSON [10].A simple example of JSON name value pair is demonstrated below- [8] JSON object structure.…”

Elimination of the Redundancy Related to Combining Algorithms to Improve the PDP Evaluation Performance

“…These principles are the constraints for authorizing the system to make a decision. The XACML (eXtensible Access Control Markup Language) [3] is widely used in a distributed application system [4] in the SOA (Service-Oriented Architecture) [5] environment so that the security policy can be better expressed. The XACML is an open-standard language based on the XML and is used to standardize access control implemented in the XML (eXtensible Markup Language).…”