Fine-grained Service Side Access Control Model for Web Application
Zhijun Liang, Hua Zhang, Zhonghua Zhao
Available Online July 2015.
- https://doi.org/10.2991/icismme-15.2015.1How to use a DOI?
- access control; extension; privilege management
- In the paper of SCUTA, to the more and more complicated network environment and the w3c’s Same-Origin Policy’s vulnerability, the author designs a new web access control model. It eases the difficulty of web policy’s configuration and reduces the potential vulnerabilities. However, because of the inflexible model configuration design, it has low system flexibility. What’s more, it also has many vulnerability. On the basis of it, we design a new model in detail, which was implemented and checked with Apache, PHP and Mysql. Relative to SCUTA model, this access control model can make the developer implements policy configuration easier, more efficient and more flexible avoiding the original vulnerabilities, which provides that this model can be more secure, more effective and faster.
- Open Access
- This is an open access article distributed under the CC BY-NC license.
Cite this article
TY - CONF AU - Zhijun Liang AU - Hua Zhang AU - Zhonghua Zhao PY - 2015/07 DA - 2015/07 TI - Fine-grained Service Side Access Control Model for Web Application BT - First International Conference on Information Sciences, Machinery, Materials and Energy PB - Atlantis Press SP - 1 EP - 6 SN - 1951-6851 UR - https://doi.org/10.2991/icismme-15.2015.1 DO - https://doi.org/10.2991/icismme-15.2015.1 ID - Liang2015/07 ER -