An Access Control Implementation Targeting Resource-constrained Environments

Zhang, Fan and Butler, Bernard and Jennings, Brendan (2019) An Access Control Implementation Targeting Resource-constrained Environments. In: 15th International Conference on Network and Service Management, CNSM 2019 :. 15th International Conference on Network and Service Management, CNSM 2019 . Institute of Electrical and Electronics Engineers Inc., CAN. ISBN 9783903176249

Full text not available from this repository. (Request a copy)


As more and more services are deployed on devices near the network edge, security operations (such as authentication and authorization) need to move with them. Typically, edge devices have fewer resources than data center servers and so the security operations need to make more efficient use of what is available while offering adequate performance. Authorization adds latency and requires system resources, but the need for security management with strong authorization at the network edge is growing. We have released the first open source, high-performance, resource-efficient, XACML3 standard-compatible Policy Decision Point (PDP) called Luas (means "speed" in the Irish language) based on an event-driven architecture and a non-blocking computational model, using a Bloom Filter for better performance. We compared its performance, resource usage and reliability against existing open source PDPs. Like those we tested, it provides accurate decisions, but Luas offers much faster security policy evaluation while using fewer system resources, and provides responses in a reasonable timeframe even when resources are scarce.

Item Type: Book Section
Additional Information: Funding Information: This work has emanated from research conducted with the financial support of Science Foundation Ireland (SFI) and is co-funded under the liuropean Regional Development Fund under Grant Number 13/RC/2077. Publisher Copyright: © 2019 IFIP.
Uncontrolled Keywords: /dk/atira/pure/subjectarea/asjc/1700/1702
Departments or Groups:
Depositing User: Admin SSL
Date Deposited: 19 Oct 2022 23:14
Last Modified: 07 Jun 2023 18:38

Actions (login required)

View Item View Item