Loading...
Please wait, while we are loading the content...
Similar Documents
An experimental testbed to predict the performance of xacml policy decision points.
| Content Provider | CiteSeerX |
|---|---|
| Author | Butler, Bernard Jennings, Brendan Botvich, Dmitri |
| Abstract | Abstract—The performance and scalability of access control systems is a growing concern as organisations deploy ever more complex communications and content management systems. This paper describes how an (offline) experimental testbed may be used to address performance concerns. To begin, timing mea-surements are collected from a server component incorporating the Policy Decision Point (PDP) under test, using representative policies and corresponding requests. Our experiments with two XACML PDP implementations show that measured request service times are typically clustered by request type; thus an algorithm for request cluster identification is presented. Cluster characterisations are used as inputs to a PDP performance model for a given policy/request mix and an analytic (queueing) model is used to estimate the equilibrium server load for different mixes of request clusters. The analytic performance prediction model is validated and extended by discrete event simulation of a PDP subject to additional load. These predictive models enable network administrators to explore the capacity of the PDP for different overall loadings (requests per unit time) and profiles (relative frequencies) of requests. I. |
| File Format | |
| Access Restriction | Open |
| Subject Keyword | Experimental Testbed Xacml Policy Decision Point Request Service Time Unit Time Performance Concern Request Cluster Identification Representative Policy Policy Decision Point Server Component Request Type Additional Load Different Overall Loading Pdp Performance Model Access Control System Predictive Model Enable Network Administrator Content Management System Pdp Subject Discrete Event Simulation Relative Frequency Analytic Performance Prediction Model Policy Request Mix Cluster Characterisation Complex Communication Equilibrium Server Load Request Cluster Different Mix Xacml Pdp Implementation |
| Content Type | Text |
| Resource Type | Article |