An ACO-based Algorithm for Efficient XACML Policy Evaluation
Yunpeng Zhang, Beibei Zhang · 2017
With the explosive growth of the internet, XACML policies have grown rapidly in size and complexity, and the efficiency of ABAC decision-making is unable to meet people's increasing demands, so this paper serves to solve this problem by providing a model based on an ACO algorithm.The model first divides the XACML policy into different classifications by using an ACO algorithm, then searches for related policies by calculating the Euclidean Distance with the request attribute values and XACML policy center attribute values.This approach transforms the policy evaluation into a numerical calculation.To evaluate the efficiency and the effectiveness of these methods, the paper conducts two sets of tests.The first results shows that the classification effect of ACO algorithms is better than K-means; and the second results shows that the Euclidean Distance method is more efficient than the execution vectors used by Said Marouf, et al. to search for related policies.