Attribute based access control constraint based on subject similarity

摘要

Access control constraint aims to avoid risky or sensitive set of objects being possessed by similar subjects. In order to improve the flexibility of constraints, this paper first examines potential inner-relationships among subjects, objects, and also the relationships between them in access control respectively, then proposes revised attribute-based access control constraint based on subject similarity. Test results shows this constraint is flexible. It effectively prevents similar subjects plot together to attack the application system.