[Search | Browse Authors | Browse Reports | Home ]

Towards High Performance Security Policy Evaluation

MSU-CSE-10-7

Qiang Wang, Fei Chen, Alex X. Liu, Zhiguang Qin
March, 2010

The Enterprise Privacy Authorization Language (EPAL) is a formal language for specifying fine-grained enterprise privacy policies. With the adoption of EPAL, especially in web applications, the performance of EPAL policy evaluation engines becomes a critical issue. In this paper, we propose Eengine, an engine for efficient EPAL policy evaluation. Eengine first converts all string values in an EPAL policy to numerical values. Second, it converts a numericalized EPAL policy specified as a list of rules following the first-match semantics to a tree structure for efficient processing of numericalized requests.


Display BibTex Entry

The following online versions of this document are available.

For more information on this report, contact alexliu@cse.msu.edu.


You are granted permission for the non-commercial reproduction, distribution, display, and performance of this technical report in any format.


[Search | Browse Authors | Browse Reports | Home ]