基于XACML的策略评估优化技术的研究

摘要

为了提高XACML策略评估逐层匹配的效率,在规则优化方面提出按规则的请求权重对规则进行排序的思想；同时在策略评估方面提出XACML合并算法的优先级及主体的规则索引表,优先选择符合匹配条件的策略和规则来提高匹配速度.仿真实验验证了采取这些措施后,缩短了PDP进行评估的时间,提高了评估效率.%To improve the efficiency of XACML rule matching by layer, in the rules optimization aspect, this paper proposed the thought of sorting of rules according to rules' request weight. At the same time, in the evaluation of policy aspect, this paper proposed the priorities of XACML combination algorithms and rules index table of the subject , preferentially select the satisfied policies and rules to improve the matching speed. The simulation experiment shows these measures shortened the evaluation time of PDP, improved the assessment efficiency. Finally, it proposed the future directions.