Using the decision support algorithms combining different security policies

Abstract

During the development of the security subsystem of modern information systems, a problem of the joint implementation of several access control models arises quite often. Traditionally, a request for the user's access to resources is granted in case of simultaneous access permission by all active security policies. When there is a conflict between the decisions of the security policies, the issue of granting access remains open. The proposed method of combining multiple security policies is based on the decision support algorithms and provides a response to the access request, even in case of various decisions of active security policies. To construct combining algorithm we determine a number of weight coefficients, use a weighted sum of the clearance levels of individual security policies and apply the analytic hierarchy process. The weight coefficients are adjustable parameters of the algorithm and allow administrator to manage the impact of the various security rules flexibly.

Educational-Methodological Support of Educational Programs

“…2: «образовательная программа -комплекс основных характеристик образования…, который представлен в виде учебного плана, календарного учебного графика, рабочих программ учебных предметов, курсов, дисциплин (модулей), иных компонентов, а также оценочных и методических материалов»). Вопрос модернизации системы учебно-методического обеспечения образовательных программ был освещен рядом авторов в статьях [7][8][9][10][11][12][13]. В работе [7] представлен анализ последних преобразований в области нормативного регулирования библиотечно-информационного обеспечения образовательных программ, отмечена необходимость дополнительного регулирования данной области локальными нормативными актами образовательных организаций.…”

“…В работах [9,10] рассмотрен вопрос учебно-методического обеспечения в рамках развития информационно-образовательной среды образовательных организаций. Современные тенденции развития информационно-образовательной среды образовательных организаций также нашли отражение в материалах авторов [11,12], отмечено, что важным фактором интенсификации освоения образовательных программ обучающимися, кроме прочих, является электронная библиотечная система.…”

“…273-FZ of December 29, 2012, methodological materials (item 9 of article 2: "educational program -a set of basic characteristics of education ..., which is presented in the form of a curriculum, calendar training schedule, work programs of subjects, courses, disciplines (modules), other components, as well as evaluation and methodological materials"). The issue of upgrading the system of educational-methodological support for educational programs was covered by a number of authors in articles [7][8][9][10][11][12][13]. In work [7] the analysis of the last transformations in the field of normative regulation of library and information support of educational programs is presented, the necessity of additional regulation of this area by local normative acts of educational organizations is noted.…”

“…In [9,10] the issue of educational-methodological support in the development of the information and educational environment of educational organizations was considered. Modern trends in the development of the information and educational environment of educational organizations are also reflected in the materials of the authors [11,12], it is noted that an important factor in intensifying the development of educational programs for students, among others, is the electronic library system.…”

User authorization in a system with a role-based access control on the basis of the analytic hierarchy process

“…In this situation, linear programming models for decision making become unacceptable. But the existence of several criteria and alternative solutions makes it possible to suppose the applicability of the analytic hierarchy process [2,3,4,5,6,7]. At the same time, it is important to determine the quantitative indicators for constructing a numerical scale of preferences for possible alternatives (in our case, roles that have the required permissions for the user).…”