A Graph-Based Framework for ABAC Policy Enforcement and Analysis

Mian Yang; Vijayalakshmi Atluri; Shamik Sural; Jaideep Vaidya

doi:10.1007/978-3-031-65172-4_1

A Graph-Based Framework for ABAC Policy Enforcement and Analysis

Mian Yang, Vijayalakshmi Atluri, Shamik Sural, Jaideep Vaidya

Rutgers Business School, Management & Information Systems

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

In the realm of access control mechanisms, Attribute-Based Access Control (ABAC) stands out for its dynamic and fine-grained approach, enabling permissions to be allocated based on attributes of subjects, objects, and the environment. This paper introduces a graph model for ABAC, named G_ABAC. The G_ABAC leverages directional flow capacities to enforce access control policies, mapping the potential pathways between a subject and an object to ascertain access rights. Furthermore, graph based modeling of ABAC enables the utilization of readily available commercial graph database systems to implement ABAC. As a result, enforcement and analyses of ABAC can be accomplished simply through graph queries. In particular, we demonstrate this using the Neo4j graph database and present the performance of executing enforcement and different analyses queries.

Original language	English (US)
Title of host publication	Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings
Editors	Anna Lisa Ferrara, Ram Krishnan
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	3-23
Number of pages	21
ISBN (Print)	9783031651717
DOIs	https://doi.org/10.1007/978-3-031-65172-4_1
State	Published - 2024
Event	38th Annual IFIP 11.3 Conference on Data and Applications Security and Privacy, DBSec 2024 - San Jose, United States Duration: Jul 15 2024 → Jul 17 2024

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	14901 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	38th Annual IFIP 11.3 Conference on Data and Applications Security and Privacy, DBSec 2024
Country/Territory	United States
City	San Jose
Period	7/15/24 → 7/17/24

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-031-65172-4_1

Cite this

Yang, M., Atluri, V., Sural, S., & Vaidya, J. (2024). A Graph-Based Framework for ABAC Policy Enforcement and Analysis. In A. L. Ferrara, & R. Krishnan (Eds.), Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings (pp. 3-23). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 14901 LNCS). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-65172-4_1

Yang, Mian ; Atluri, Vijayalakshmi ; Sural, Shamik et al. / A Graph-Based Framework for ABAC Policy Enforcement and Analysis. Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings. editor / Anna Lisa Ferrara ; Ram Krishnan. Springer Science and Business Media Deutschland GmbH, 2024. pp. 3-23 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{b3aede51f8894ddcae11274faafef148,

title = "A Graph-Based Framework for ABAC Policy Enforcement and Analysis",

abstract = "In the realm of access control mechanisms, Attribute-Based Access Control (ABAC) stands out for its dynamic and fine-grained approach, enabling permissions to be allocated based on attributes of subjects, objects, and the environment. This paper introduces a graph model for ABAC, named GABAC. The GABAC leverages directional flow capacities to enforce access control policies, mapping the potential pathways between a subject and an object to ascertain access rights. Furthermore, graph based modeling of ABAC enables the utilization of readily available commercial graph database systems to implement ABAC. As a result, enforcement and analyses of ABAC can be accomplished simply through graph queries. In particular, we demonstrate this using the Neo4j graph database and present the performance of executing enforcement and different analyses queries.",

author = "Mian Yang and Vijayalakshmi Atluri and Shamik Sural and Jaideep Vaidya",

note = "Publisher Copyright: {\textcopyright} IFIP International Federation for Information Processing 2024.; 38th Annual IFIP 11.3 Conference on Data and Applications Security and Privacy, DBSec 2024 ; Conference date: 15-07-2024 Through 17-07-2024",

year = "2024",

doi = "10.1007/978-3-031-65172-4_1",

language = "English (US)",

isbn = "9783031651717",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "3--23",

editor = "Ferrara, {Anna Lisa} and Ram Krishnan",

booktitle = "Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings",

address = "Germany",

}

Yang, M, Atluri, V, Sural, S & Vaidya, J 2024, A Graph-Based Framework for ABAC Policy Enforcement and Analysis. in AL Ferrara & R Krishnan (eds), Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 14901 LNCS, Springer Science and Business Media Deutschland GmbH, pp. 3-23, 38th Annual IFIP 11.3 Conference on Data and Applications Security and Privacy, DBSec 2024, San Jose, United States, 7/15/24. https://doi.org/10.1007/978-3-031-65172-4_1

A Graph-Based Framework for ABAC Policy Enforcement and Analysis. / Yang, Mian; Atluri, Vijayalakshmi; Sural, Shamik et al.
Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings. ed. / Anna Lisa Ferrara; Ram Krishnan. Springer Science and Business Media Deutschland GmbH, 2024. p. 3-23 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 14901 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - A Graph-Based Framework for ABAC Policy Enforcement and Analysis

AU - Yang, Mian

AU - Atluri, Vijayalakshmi

AU - Sural, Shamik

AU - Vaidya, Jaideep

N1 - Publisher Copyright: © IFIP International Federation for Information Processing 2024.

PY - 2024

Y1 - 2024

N2 - In the realm of access control mechanisms, Attribute-Based Access Control (ABAC) stands out for its dynamic and fine-grained approach, enabling permissions to be allocated based on attributes of subjects, objects, and the environment. This paper introduces a graph model for ABAC, named GABAC. The GABAC leverages directional flow capacities to enforce access control policies, mapping the potential pathways between a subject and an object to ascertain access rights. Furthermore, graph based modeling of ABAC enables the utilization of readily available commercial graph database systems to implement ABAC. As a result, enforcement and analyses of ABAC can be accomplished simply through graph queries. In particular, we demonstrate this using the Neo4j graph database and present the performance of executing enforcement and different analyses queries.

AB - In the realm of access control mechanisms, Attribute-Based Access Control (ABAC) stands out for its dynamic and fine-grained approach, enabling permissions to be allocated based on attributes of subjects, objects, and the environment. This paper introduces a graph model for ABAC, named GABAC. The GABAC leverages directional flow capacities to enforce access control policies, mapping the potential pathways between a subject and an object to ascertain access rights. Furthermore, graph based modeling of ABAC enables the utilization of readily available commercial graph database systems to implement ABAC. As a result, enforcement and analyses of ABAC can be accomplished simply through graph queries. In particular, we demonstrate this using the Neo4j graph database and present the performance of executing enforcement and different analyses queries.

UR - http://www.scopus.com/inward/record.url?scp=85200595802&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85200595802&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-65172-4_1

DO - 10.1007/978-3-031-65172-4_1

M3 - Conference contribution

AN - SCOPUS:85200595802

SN - 9783031651717

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 3

EP - 23

BT - Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings

A2 - Ferrara, Anna Lisa

A2 - Krishnan, Ram

PB - Springer Science and Business Media Deutschland GmbH

T2 - 38th Annual IFIP 11.3 Conference on Data and Applications Security and Privacy, DBSec 2024

Y2 - 15 July 2024 through 17 July 2024

ER -

Yang M, Atluri V, Sural S, Vaidya J. A Graph-Based Framework for ABAC Policy Enforcement and Analysis. In Ferrara AL, Krishnan R, editors, Data and Applications Security and Privacy XXXVIII - 38th Annual IFIP WG 11.3 Conference, DBSec 2024, Proceedings. Springer Science and Business Media Deutschland GmbH. 2024. p. 3-23. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-031-65172-4_1