Research on the quantification method of the operational need based on access purpose and exponential smoothing

摘要

Operational need assessment has not been fully studied in correlation research on risk-based access control. The existing method can't adapt to multiple purpose-sets and lacks dynamics and predictability. Firstly, the concept of purpose forest is presented, based on which the purpose forest traversing quantification algorithm is given to compute the static operational need. Secondly, the access history is counted to compute the dynamic operational need, exponential smoothing is introduced to increase the predictability of the quantification result and then a dynamic operational need quantification method based on exponential smoothing is put forward. Finally, on the basis of the above research, an operational need quantification method combining both the static and dynamic is proposed. The analysis shows that it can make up the existing method's deficiency and has a slight effect on system performance, which provides further support for the realization of the more flexible and adaptive access control.