A Model of Role Risk Based Intrusion Prevention for Cloud Environment
Cloud computing is a distributed and dynamic computing model that still has many difficulties. Intrusion prevention based on access control is an essential research challenge to better ensure the security of the cloud network. The flexibility and the scalability of the application of access control are the essential issues in a cloud environment. This paper proposes the use of risk and role based dynamic access control for preventing intrusions targeting the cloud computing, where the main enhancement of the proposed procedure is that access decision is mainly based on the resources available in the cloud services providers. The proposed scheme get the access decision based on a mixture of eXtensible Access Control Markup Language (XACML) decisions, risk analysis, and vulnerabilities assessment. Experimental results based on a comparison with related work are also presented to show the efficiency of the proposed approach.
2018 14th International Wireless Communications Mobile Computing Conference (IWCMC)