On the Analysis Problem of the Attribute-Based Access Control Model HGABAC

Due to the limitations of the role-based access control (RBAC) model, the attribute-based access control (ABAC) model is being researched and promised to become a dominant access model in the near future. Similar to RBAC, the security analysis problem, i.e., the problem to analyze the policy to verify if there is any security issue in the policy is one of the crucial problems in ABAC. In this paper, we consider the security analysis problem in a recent proposed implementation of ABAC model, namely HGABAC and its administration model GURAG. We investigate the backward procedure proposed and assemble this procedure to build the analysis technique for HGABAC and GURAG policies. We also implement the technique and perform some experiments to show the scalability of the proposed technique.