Authors:
Slim Trabelsi
1
;
Adrien Ecuyer
2
;
Paul Cervera Y Alvarez
3
and
Francesco Di Cerbo
1
Affiliations:
1
SAP Labs France, France
;
2
Open System AG, Switzerland
;
3
Amadeus, France
Keyword(s):
Cloud, Access Control, Performance, Caching, Scalability, Policy, Security.
Related
Ontology
Subjects/Areas/Topics:
Cloud Computing
;
Cloud Computing Enabling Technology
;
Cloud Ilities (Scalability, Availability, Reliability)
;
Cloud Optimization and Automation
;
Performance Development and Management
;
Security, Privacy, and Compliance Management
Abstract:
Cloud computing is synonym for high performance computing. It offers a very scalable infrastructure for the deployment of an arbitrarily high number of systems and services and to manage them without impacts on their performance. As for traditional systems, also such a wide distributed infrastructure needs to fulfil basic security requirements, like to restrict access to its resources, thus requiring authorization and access control mechanisms. Cloud providers still rely on traditional authorization and access control systems, however in some critical cases such solutions can lead to performance issues. The more complex is the access control structure (many authorization levels, many users and resources to protect); the slower is the enforcement of access control policies. In this paper we present a performance study on these traditional access control mechanisms like XACML, which computes the overhead generated by the authorizations checking process in extreme usage conditions. The
refore, we propose a new approach to make access control systems more scalable and suitable for cloud computing high performance requirements. This approach is based on a high speed caching access control tree that accelerates the decision making process without impacting on the consistency of the rules. Finally, by comparing the performance test results obtained by our solution to a traditional XACML access control system, we demonstrate that the ACT in-memory approach is more suitable for Cloud infrastructures by offering a scalable and high speed AC solution.
(More)