XACML Policy Performance Evaluation Using a Flexible Load Testing Framework

Bernard Butler; Brendan Jennings; Dmitri Botvich

doi:10.1145/1866307.1866385

XACML Policy Performance Evaluation Using a Flexible Load Testing Framework

Bernard Butler, Brendan Jennings, Dmitri Botvich

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

10 Citations (Scopus)

Abstract

The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

Original language	English
Title of host publication	CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security
Pages	648-650
Number of pages	3
DOIs	https://doi.org/10.1145/1866307.1866385
Publication status	Published - 2010
Event	Proc. 17th ACM Conference on Computer and Communications Security (CCS 2010) - Chicago, IL, USA, Chicago, IL, USA Duration: 01 Jan 2010 → … http://dl.acm.org/citation.cfm?id=1866385&CFID=62261431&CFTOKEN=34468680

Publication series

Name	Proceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)	1543-7221

Conference

Conference	Proc. 17th ACM Conference on Computer and Communications Security (CCS 2010)
City	Chicago, IL, USA
Period	01/01/2010 → …
Internet address	http://dl.acm.org/citation.cfm?id=1866385&CFID=62261431&CFTOKEN=34468680

Keywords

Access control policies
Measurement testbed
Performance evaluation

Access to Document

10.1145/1866307.1866385

XACML Policy Performance Evaluation Using a Flexible Load Testing FrameworkOther version, 0 bytes

http://repository.wit.ie/id/document/2196

Cite this

@inproceedings{70e077f68fab45b79241a4260e9d735a,

title = "XACML Policy Performance Evaluation Using a Flexible Load Testing Framework",

abstract = "The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.",

keywords = "Access control policies, Measurement testbed, Performance evaluation",

author = "Bernard Butler and Brendan Jennings and Dmitri Botvich",

year = "2010",

doi = "10.1145/1866307.1866385",

language = "English",

isbn = "9781450302449",

series = "Proceedings of the ACM Conference on Computer and Communications Security",

pages = "648--650",

booktitle = "CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security",

note = "Proc. 17th ACM Conference on Computer and Communications Security (CCS 2010) ; Conference date: 01-01-2010",

url = "http://dl.acm.org/citation.cfm?id=1866385&CFID=62261431&CFTOKEN=34468680",

}

Butler, B, Jennings, B & Botvich, D 2010, XACML Policy Performance Evaluation Using a Flexible Load Testing Framework. in CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. Proceedings of the ACM Conference on Computer and Communications Security, pp. 648-650, Proc. 17th ACM Conference on Computer and Communications Security (CCS 2010), Chicago, IL, USA, 01/01/2010. https://doi.org/10.1145/1866307.1866385

XACML Policy Performance Evaluation Using a Flexible Load Testing Framework. / Butler, Bernard; Jennings, Brendan; Botvich, Dmitri.
CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. 2010. p. 648-650 (Proceedings of the ACM Conference on Computer and Communications Security).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - XACML Policy Performance Evaluation Using a Flexible Load Testing Framework

AU - Butler, Bernard

AU - Jennings, Brendan

AU - Botvich, Dmitri

PY - 2010

Y1 - 2010

N2 - The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

AB - The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

KW - Access control policies

KW - Measurement testbed

KW - Performance evaluation

UR - http://www.scopus.com/inward/record.url?scp=78649997918&partnerID=8YFLogxK

U2 - 10.1145/1866307.1866385

DO - 10.1145/1866307.1866385

M3 - Conference contribution

AN - SCOPUS:78649997918

SN - 9781450302449

T3 - Proceedings of the ACM Conference on Computer and Communications Security

SP - 648

EP - 650

BT - CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security

T2 - Proc. 17th ACM Conference on Computer and Communications Security (CCS 2010)

Y2 - 1 January 2010

ER -

XACML Policy Performance Evaluation Using a Flexible Load Testing Framework

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this