@inproceedings{bd759a5e346441e08e5b914c81b07f3e,
title = "AR-ABAC: A New Attribute Based Access Control Model Supporting Attribute-Rules for Cloud Computing",
abstract = "One of the most important challenges that have threatened cloud computing and caused its slow adoption is security. Since clouds have diverse groups of users with different sets of security requirements, restricting the users' accesses and protecting information from unauthorized accesses have become the most difficult tasks. To address these critical challenges, in this paper we first formalize Attribute Based Access Control (ABAC) and propose a new access control model, called Attribute-Rule ABAC (AR-ABAC), for cloud computing to meet critical access control requirements in clouds. Our model supports the attribute-rules that deal with the association between users and objects, as well as the capability for accessing objects based on their sensitivity levels. The attribute-rules specify an agreement that determines what kind of attributes should be used and the number of attributes considered for making access decisions. In addition, our model ensures secure resource sharing among potential untrusted tenants and supports different access permissions to the same user at the same session.",
keywords = "Access control models, Attribute based access control, Cloud computing security",
author = "Khaled Riad and Zhu Yan and Hongxin Hu and Ahn, \{Gail Joon\}",
note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 1st IEEE International Conference on Collaboration and Internet Computing, CIC 2015 ; Conference date: 28-10-2015 Through 30-10-2015",
year = "2016",
month = mar,
day = "1",
doi = "10.1109/CIC.2015.38",
language = "English",
series = "Proceedings - 2015 IEEE Conference on Collaboration and Internet Computing, CIC 2015",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "28--35",
booktitle = "Proceedings - 2015 IEEE Conference on Collaboration and Internet Computing, CIC 2015",
address = "United States",
}