Beyond scale: An efficient framework for evaluating web access control policies in the Era of big data

Abstract

Recently explosive growth in data and the rapid development of communicate technologies bring us into the era of big data. As an important security strategy, access control calls for more highly efficient methods for its evaluation. However, most of the traditional work has already met the bottleneck. Although there’ve been some methods focusing on the performance of the evaluation engine, these methods are mostly either not in the setting of big data, or there are many limitations when they are deployed in practice. In this paper, we propose a novel framework based on a two-level structure employing multiple clustering techniques. Before building the framework, we propose some ideas for attributes’ preprocessing. Then we obtain the two-level structure by a two-stage clustering. In first stage, we make a coarse-grained clustering in quality, and in second stage, we make a fine-grained clustering in quantity. Finally, we can obtain a further improvement by set-operations. In experiments, the framework is applied to some prevailing evaluation engines using large dataset, and the results show that our approach can get great improvements for all involved engines.