Research on network security evaluation with extended RBAC access control model
HE Qia · Sensor World · 2014
On how to evaluate the performance of control models,a method of N-dimensional security entropy is introduced in this paper. According to the definition and description of the information entropy in information theory,the N-dimensional security entropy in Self-access Control model is discussed firstly. Then,by means of the N- dimensional security entropy,the quantitative security performance is measured in RBAC control model. In order to solve the security performance measurement with complex roles access in the management information systems,an extension of RBAC control(EXRBAC) model is proposed in this paper and analysis quantitative with N-dimensional security entropy methods. Through analyzing and comparing the security performance of these three control models,it is shown that the performance of EXRBAC model is improved under the conditions of multi-class and multi-level roles