A Research on Conflicts Detection in ABAC Policy

Attribute-based access control (ABAC) is widely applied to complicate information system such as cloud computing and Internet of thing because of fine-grained authority and flexibility. However, conflicts between policy rules occur frequently due to its huge scale and complex expression. This paper proposes a novel method for detecting conflicts between ABAC rules with the help of converting rules to a set of binary sequences. Then the conflict detection is achieved throng the bitwise AND operation of binary sequence, which improves the efficiency of detection. Afterwards, the correctness of the method is illustrated by a concrete example. And the efficiency of the proposed method for complex and large-scale policy conflicts detection is verified by simulation experiments.