A Novel Role-based Access Control Model in Cloud Environments
- DOI
- 10.1080/18756891.2016.1144149How to use a DOI?
- Keywords
- Access control; Cloud; Security; Availability; Trust; Bayesian
- Abstract
In Cloud environments, the relationship between resources and users is more ad hoc and dynamic. The role-based access control (RBAC) model is an appropriate access control model for Cloud environments. When using the RBAC model in Cloud environments, some new elements should be considered. This paper proposes a SAT-RBAC model (security and availability based trust relationship in RBAC) and adopts the following elements as the main factors of a trust relationship: the security state and network availability of the host used by a user, the protection state of the service providers that are related to the role. A security-based scheduling model for Cloud environments is presented. Because of the uncertainty of Cloud environments, the trust relationship is divided into three zones: the unbelievable zone, the probable believable zone and the believable zone. Bayesian method is used to estimate the trust probability distribution in the probable believable zone. This paper also provides algorithms to evaluate the values of the main elements of a trust relationship. Finally, the experiments in simulated Cloud environment based on CloudSim in PlanetLab are discussed and the results prove that the SAT-RBAC model is effective in filtering abnormal behaviors in Cloud environments.
- Copyright
- © 2016. the authors. Co-published by Atlantis Press and Taylor & Francis
- Open Access
- This is an open access article under the CC BY-NC license (http://creativecommons.org/licences/by-nc/4.0/).
Download article (PDF)
View full text (HTML)
Cite this article
TY - JOUR AU - Jun Luo AU - Hongjun Wang AU - Xun Gong AU - Tianrui Li PY - 2016 DA - 2016/01/01 TI - A Novel Role-based Access Control Model in Cloud Environments JO - International Journal of Computational Intelligence Systems SP - 1 EP - 9 VL - 9 IS - 1 SN - 1875-6883 UR - https://doi.org/10.1080/18756891.2016.1144149 DO - 10.1080/18756891.2016.1144149 ID - Luo2016 ER -