A dynamic attribute-based risk aware access control model (DA-RAAC) for cloud computing

Cloud computing is a distributed computing paradigm and provides services to the customers through the internet. Cloud computing virtualizes system by pooling and sharing resources. Customers store their data on the cloud using resources and they provide the access of data to the users. Cloud computing has to ensure the security of the data stored in the cloud. Access to the data stored in the cloud is provided through access controls defined by data owner while storing the data in the cloud. Access control models using access controls specified by the data owner will monitor access to the data on the cloud. Earlier various traditional access control models are proposed and they are not sufficient for the cloud environment. Cloud environment supports remote access for computation, storage etc. Cloud computing demands attribute based encryption-access control models. Various access control models are proposed using attribute encryption namely KP-ABE, CP-ABE, HASBE. These access control models are static in nature. In this paper, we propose a dynamic attribute-based risk aware access control model which can be hybridized with the above access control models. Our model combines risk computation with attributes used for access control. This paper describes the need and motivation for the design and development of the DA-RAAC model by enhancing NIST RBAC model. We formally prove our model is highly dynamic when compared to the existing attribute-based access control models through experiment results.