IDEAS home Printed from https://ideas.repec.org/a/ids/ijmdma/v17y2018i3p245-278.html
   My bibliography  Save this article

FRABAC: a new hybrid access control model for the heterogeneous multi-domain systems

Author

Listed:
  • Hasiba Ben Attia
  • Laid Kahloul
  • Saber Benharzallah

Abstract

In this paper, a new hybrid, flexible, scalable and fine-grained model, fine-grained role-attribute access control (FRABAC) is proposed. FRABAC combines the benefits of the two most popular basic models: role-based access control (RBAC) and attribute-based access control (ABAC). The new proposed model overcomes the shortcomings of both models RBAC and ABAC known as combinatorial explosion in rules and roles when the security policy becomes complicated. Besides avoiding the combinatorial explosion, the new proposed model provides a role permission agreement (APA) to handle inter organisational access decision in collaborative cloud services cases. The proposed model is applied to define the security policies in realistic case studies and results are compared to previous existing models. On the other hand, the consistency and the correctness of the built policies are analysed through a formal modelling/analysis approach. This formal approach uses hierarchical coloured Petri nets (HCPNs) to model the policy and the CPN-tools to analyse the generated models.

Suggested Citation

  • Hasiba Ben Attia & Laid Kahloul & Saber Benharzallah, 2018. "FRABAC: a new hybrid access control model for the heterogeneous multi-domain systems," International Journal of Management and Decision Making, Inderscience Enterprises Ltd, vol. 17(3), pages 245-278.
    • Handle: RePEc:ids:ijmdma:v:17:y:2018:i:3:p:245-278
    as

    Download full text from publisher

    File URL: http://www.inderscience.com/link.php?id=93493
    Download Restriction: Access to full text is restricted to subscribers.
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:ids:ijmdma:v:17:y:2018:i:3:p:245-278. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sarah Parker (email available below). General contact details of provider: http://www.inderscience.com/browse/index.php?journalID=19 .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.