Efficient Policy Evaluation

The adoption of XACML as the standard for specifying access control policies for various applications, especially web services is vastly increasing. This calls for high performance XACML policy evaluation engines. A policy evaluation engine can easily become a bottleneck when enforcing XACML policies with a large number of rules. In this project we are investigating mechanisms to enhance and optimize the XACML policy execution. This project is a collaborative project with Penn State University. Related Publications:

  1. Said Marouf, Mohamed Shehab, Anna C. Squicciarini, and Smitha Sundareswaran, Adaptive Reordering & Clustering Based Framework for Efficient XACML Policy Evaluation, IEEE Transactions on Services Computing, May 2010. [TSC 2010 PDF]
  2. Said Marouf, Mohamed Shehab, Anna C. Squicciarini, Smitha Sundareswaran, Statistics & Clustering Based Framework for Efficient XACML Policy Evaluation, IEEE International Symposium on Policies for Distributed Systems and Networks (Policy’09), London, UK, July 2009. [Policy 2009 PDF]

Comments are closed.