通信学报

• 学术通信 • 上一篇    下一篇

基于统计分析优化的高性能XACML策略评估引擎

牛德华,马建峰,马 卓,李辰楠,王 蕾   

  1. 西安电子科技大学 计算机学院,陕西 西安 710071
  • 出版日期:2014-08-25 发布日期:2014-08-15
  • 基金资助:
    长江学者和创新团队发展计划基金资助项目(IRT1078)

HPEngine: high performance XACML policy evaluation engine based on statistical analysis HPEngine: high performance XACML policy evaluation engine based on statistical analysis

  • Online:2014-08-25 Published:2014-08-15

摘要: 为提高分布式环境下XACML策略评估引擎的效率,提出了新的XACML策略评估引擎HPEngine。该引擎利用基于统计分析的策略优化机制动态精化策略,并将精化的策略由文本形式转化为数值形式;同时采用基于统计分析的多级缓存机制存储频繁调用的请求结果对、属性和策略信息。仿真结果表明,HPEngine所采用的基于统计分析的多级优化机制缩减了策略规模,降低了引擎和其他功能部件的通信损耗,减少了匹配运算量,提高了匹配速度,整体评估性能优于其他同类系统。

Abstract: To improve the efficiency of the XACML(eXtensible access control markup language) policy evaluation engine under distributed environment, a novel XACML policy evaluation engine, HPEngine was proposed. The HPEngine dynamically refined policies based on statistical analysis of the policy optimization mechanism first and transformed text form of policy into numerical afterward. Moreover, the engine adopted the multi-level caching mechanism based on the statistical analysis to store frequently called request-results, attributes and policy information. Emulation results show that multi-level optimization mechanisms based on the statistical analysis applied in HPEngine significantly reduce the size of policies, decrease the communication cost between the engine and other components, lessen the amount of matching operation and improve the speed of matching. Comparative analysis demonstrates that HPEngine is obviously better in performance than other similar systems.

No Suggested Reading articles found!