Policy Review in Attribute-Based Access Control
| dc.contributor.advisor | Krishnan, Ram | |
| dc.contributor.author | Lawal, Sherifdeen | |
| dc.contributor.committeeMember | Chen, Guenevere | |
| dc.contributor.committeeMember | Fernandez, Maribel | |
| dc.contributor.committeeMember | John, Eugene | |
| dc.creator.orcid | https://orcid.org/0000-0002-8685-7181 | |
| dc.date.accessioned | 2024-02-12T14:53:22Z | |
| dc.date.available | 2024-02-12T14:53:22Z | |
| dc.date.issued | 2021 | |
| dc.description | This item is available only to currently enrolled UTSA students, faculty or staff. To download, navigate to Log In in the top right-hand corner of this screen, then select Log in with my UTSA ID. | |
| dc.description.abstract | The Next Generation Access Control (NGAC), founded on the Policy Machine (PM), is a robust Attribute-Based Access Control (ABAC) framework that enables a structured and flexible approach for the establishment of the conventional access control models. The authorization state of the policy machine is an annotated Directed Acyclic Graph (DAG). Structurally, relations among attributes of the same type are hierarchical. This structure allows specifying authorization/revocation in multiple ways. However, one or more limitations can make most of the approaches to grant or revoke access inconsistent with existing policies. We proposed a variety of algorithms that provides the Policy Machine administrator a comprehensive list of all possible methods to authorize or revoke access using ABAC policy review. The approaches generated by these algorithms can help the PM administrator make an informed decision before access authorization or revocation. This work began with a pilot study where we consider the policy review for authorization of an administrative access right, user assignment. The preliminary work evolved to a generic algorithm that reviews authorization policy for other administrative access rights. A thorough extension of the generic algorithm accommodates the policy review of authorization with constraints and revocation. In recent times, as the number of blockchain use cases continues to grow, methods and technologies utilized by fraudsters continue to become sophisticated. The most notable form of cyber-attack utilizes a security breach in the internal security of blockchain systems, leading to illegal access to application services. A complex system like the blockchain network requires a dynamic, flexible, and scalable access control mechanism. There are numerous research efforts to leverage smart contracts in implementing access control based on blockchain. However, most of these contributions are either focused on blockchain-based access control for an off-chain resource. Other effects implement blockchain-based access control for a specific domain. This dissertation presents the first-ever implementation of the NIST NGAC (Policy Machine) system in a blockchain network. We utilized an instance of the Policy Machine for controlling access to assets in multiple blockchain ledgers. We implemented and evaluated the algorithms in this dissertation on the Hyperledger Fabric blockchain network. | |
| dc.description.department | Electrical and Computer Engineering | |
| dc.format.extent | 103 pages | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.isbn | 9798759968337 | |
| dc.identifier.uri | https://hdl.handle.net/20.500.12588/4361 | |
| dc.language | en | |
| dc.subject | Access Management | |
| dc.subject | Attribute-Based Access Control | |
| dc.subject | National Institute of Standards and Technology | |
| dc.subject | Next Generation Access Control | |
| dc.subject | Policy Authorization Graph | |
| dc.subject | Privacy and Security | |
| dc.subject.classification | Information technology | |
| dc.subject.classification | Electrical engineering | |
| dc.title | Policy Review in Attribute-Based Access Control | |
| dc.type | Thesis | |
| dc.type.dcmi | Text | |
| dcterms.accessRights | pq_closed | |
| thesis.degree.department | Electrical and Computer Engineering | |
| thesis.degree.grantor | University of Texas at San Antonio | |
| thesis.degree.level | Doctoral | |
| thesis.degree.name | Doctor of Philosophy |
Files
Original bundle
1 - 1 of 1
No Thumbnail Available
- Name:
- Lawal_utsa_1283D_13472.pdf
- Size:
- 1.02 MB
- Format:
- Adobe Portable Document Format