IaaS-cloud security enhancement: An intelligent attribute-based access control framework

This paper mainly investigates the IaaS security enhancement from an access control point of view. IaaS requires an access control model that can cope with its dynamic and scalable features. Attribute-based Access Control (ABAC) is identified as the most appropriate model that can support IaaS features. However, ABAC does encounter challenges regarding its conceptual characteristics and formal specifications. The paper presents an analytical study of an appropriate access control model for IaaS. Furthermore, it discusses the effectiveness of using formal logic in the access control model specification, verification and reasoning. This paper proposes a practical framework for the ABAC based on artificial intelligence architecture to satisfy the dynamic and scalable nature of IaaS cloud.