计算机应用研究2017，Vol.34Issue(4)：1145-1150,6.DOI:10.3969/j.issn.1001-3695.2017.04.043
面向云服务组合的策略冲突检测机制
Policy conflict detection mechanism for cloud services composition
摘要
Abstract
To solve the problem of policy conflict under cloud services composition environnent,according to the attributes relationship of cloud composite service and the invoking relationship of the component services,this paper proposed the basic conflict,hierarchical conflict,exclusive conflict,composite constraint conflict.It designed a policy generated graph model to express access control policy set of cloud services composition.This model could show the attributes relationship and the invoking relationship of the component services well.It was flexible,easy to update and extensible.It transformed the conflict problem to the connectivity problem of graphs.This research designed a policy generated graph model based conflict detection mechanism and achieved efficient conflict detection.It could meet the needs of large-scale policy set conflict detection under cloud environment.Finally,simulation verified and evaluated the effectiveness and performance of the method.关键词
云服务/服务组合/访问控制/基于属性的访问控制/策略冲突检测Key words
cloud services/service composition/access control/attribute based access control(ABAC)/policy conflict detection分类
信息技术与安全科学引用本文复制引用
刘敖迪,王娜,刘磊..面向云服务组合的策略冲突检测机制[J].计算机应用研究,2017,34(4):1145-1150,6.基金项目
国家“863”计划资助项目(2015AA011705,2012AA012704) （2015AA011705,2012AA012704）
河南省自然科学基金资助项目(162300410334) （162300410334）
