Study On A Fuzzy Approach To Attribute Based Access Control Model In Cloud Computing

The new network such as Cloud computing,big data are driving the reforms of IT industry,which also has exposed many security risks at the same time.Cloud security has become an important factor restricting the development of cloud computing,and how to protect the security of information in cloud computing is the research focus in this paper.Cloud computing is a distributed,open and dynamic network environment,and the access control strategy in different security domains is also heterogeneous.This paper focuses on a Fuzzy approach to Attribute Based Access Control(FABAC)in cloud computing.The main work of this paper is as follows:(1)The research background and significance of access control are elaborated.Research status at home and abroad is summarized.The fundamental knowledge of access control is introduced.Classic access control that can not be used to protect the access security in cloud computing is static and exclusive in own security domain.(2)Aiming at the problem that the current access control model can not be applied in the cloud computing,this paper proposes a fuzzy approach to attribute based access control in cloud.Firstly,we define and describe the attribute information of subject,object,operation authority,access control strategy and running context environment.Then the function of attribute management,strategy implementation,strategy fuzzy decision and strategy management points of FABAC model are introduced,and the access control flow of FABAC model is defined in cloud computing.Finally,the advantages and disadvantages of the FABAC model and the traditional access control model are analyzed from the aspects of attribute and strategy.(3)Aiming at the problem that the access control strategy is not uniform,incompatible in cloud computing and access authorization has the feature of fuzziness,this paper proposes that fuzzy reasoning is used for decision-making in FABAC model.Firstly,the fuzzy inference and its synthesis rule is introduced.Then the fuzzy inference algorithm based on attribute strategy is described.Meanwhile,the simulation experiment of decision authorization in FABAC is carried out by applying fuzzy reasoning.Finally,the experimental results show that fuzzy reasoning can dynamically and flexibly evaluate access control strategy in the FABAC,so that system can achieve secure and fine-grained authorization.(4)The proposed FABAC model is designed and implemented.Firstly,the main functional modules of the.FABAC model are designed and implemented by using MyEclipse development platform and JAVA programming language.Then,the FABAC model is tested by Loadrunner.Finally,we analyze the scalability and reliability of the system.