XACML policy performance evaluation using a flexible load testing framework

Bernard Butler; Brendan Jennings; Dmitri Botvich

doi:10.1145/1866307.1866385

XACML policy performance evaluation using a flexible load testing framework

Bernard Butler, Brendan Jennings, Dmitri Botvich

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

10 Citations (Scopus)

Abstract

The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

Original language	English
Title of host publication	CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security
Pages	648-650
Number of pages	3
DOIs	https://doi.org/10.1145/1866307.1866385
Publication status	Published - 2010
Externally published	Yes
Event	17th ACM Conference on Computer and Communications Security, CCS'10 - Chicago, IL, United States Duration: 4 Oct 2010 → 8 Oct 2010

Publication series

Name	Proceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)	1543-7221

Conference

Conference	17th ACM Conference on Computer and Communications Security, CCS'10
Country/Territory	United States
City	Chicago, IL
Period	4/10/10 → 8/10/10

Keywords

Access control policies
Measurement testbed
Performance evaluation

Access to Document

10.1145/1866307.1866385

Cite this

@inproceedings{a57ae5f5a81047429893d8bd3fee31fb,

title = "XACML policy performance evaluation using a flexible load testing framework",

abstract = "The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.",

keywords = "Access control policies, Measurement testbed, Performance evaluation",

author = "Bernard Butler and Brendan Jennings and Dmitri Botvich",

year = "2010",

doi = "10.1145/1866307.1866385",

language = "English",

isbn = "9781450302449",

series = "Proceedings of the ACM Conference on Computer and Communications Security",

pages = "648--650",

booktitle = "CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security",

note = "17th ACM Conference on Computer and Communications Security, CCS'10 ; Conference date: 04-10-2010 Through 08-10-2010",

}

Butler, B, Jennings, B & Botvich, D 2010, XACML policy performance evaluation using a flexible load testing framework. in CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. Proceedings of the ACM Conference on Computer and Communications Security, pp. 648-650, 17th ACM Conference on Computer and Communications Security, CCS'10, Chicago, IL, United States, 4/10/10. https://doi.org/10.1145/1866307.1866385

XACML policy performance evaluation using a flexible load testing framework. / Butler, Bernard; Jennings, Brendan; Botvich, Dmitri.
CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security. 2010. p. 648-650 (Proceedings of the ACM Conference on Computer and Communications Security).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - XACML policy performance evaluation using a flexible load testing framework

AU - Butler, Bernard

AU - Jennings, Brendan

AU - Botvich, Dmitri

PY - 2010

Y1 - 2010

N2 - The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

AB - The performance and scalability of access control systems is growing more important as organisations deploy ever more complex communications and content management systems. Fine-grained access control is becoming more pervasive, so decisions are more frequent and policy sets are larger. We outline a flexible performance testing framework that accepts XACML PDP implementations (in the server component) and submits representative access control requests (from the client component) in a representative temporal ordering. The framework includes instrumentation and analysis modules to support performance experiments. We describe an initial realization of the framework and report on initial experiments comparing the performance of the SunXACML and Enterprise XACML PDPs.

KW - Access control policies

KW - Measurement testbed

KW - Performance evaluation

UR - http://www.scopus.com/inward/record.url?scp=78649997918&partnerID=8YFLogxK

U2 - 10.1145/1866307.1866385

DO - 10.1145/1866307.1866385

M3 - Conference contribution

AN - SCOPUS:78649997918

SN - 9781450302449

T3 - Proceedings of the ACM Conference on Computer and Communications Security

SP - 648

EP - 650

BT - CCS'10 - Proceedings of the 17th ACM Conference on Computer and Communications Security

T2 - 17th ACM Conference on Computer and Communications Security, CCS'10

Y2 - 4 October 2010 through 8 October 2010

ER -

XACML policy performance evaluation using a flexible load testing framework

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this