Risk-based access control systems built on fuzzy inferences

摘要: Fuzzy inference is a promising approach to implement risk-based access control systems. However, its application raises some novel problems that have not been yet investigated. First, because there are many different fuzzy operations, one must choose the operations best address security requirements. Second, control, though it improves information flow and better addresses requirements from critical organizations, may result in damages by malicious users before mitigating steps taken. Third, scalability of inference-based system questionable. The time required engine estimate risks be quite high especially when tens parameters hundreds rules. an need serve or thousands users. In this paper, we investigate these issues present our solutions answers them.