An Improved Genetic Algorithm for Safety and Availability Checking in Cyber-Physical Systems
Open Access
- 12 April 2021
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Access
- Vol. 9, 56869-56880
Abstract
Cross-IoT infrastructure access frequently occurs when performing tasks in a distributed computing infrastructure of a cyber-physical system (CPS). The access control technology that ensure secure access cross-IoT infrastructure usually automatically establish relationships between user-attribute/role-permission. How to efficiently determine whether an automatic authorization access control state satisfies the safety and availability requirements of a system is a huge challenge. Existing work often focuses on a single aspect of safety or availability, while ignoring the differences between permissions and the differences between users. In this paper, we first propose a fine-grained personalization policy that takes into account the specificity of permissions/users and describes the safety, availability and efficiency requirements of an access control system in CPS. Second, we define a Personalization Policy Checking (PPC) Problem to determine whether a given personalization policy is satisfied in an access control state. We give the computational complexity of the PPC problem in different subcases, and show that it is NP-complete in general. Third, we design a binary genetic search algorithm, whose improvements mainly include continuous update and selection of the best chromosomes in the population for iteration, and exploring and determining the optimal crossover and mutation probabilities, thereby improving the convergence efficiency of the algorithm. Finally, simulation results show the effectiveness of our proposed algorithm, which is especially fit for the case that the computational overhead is even more important than the accuracy in a large-scale CPS system.Keywords
Funding Information
- National Natural Science Foundation of China (62072411, 61872323)
- Zhejiang Provincial Natural Science Foundation of China (LR21F020001)
- Department of Education of Zhejiang Province (Y202043497)
- Social Development Project of Zhejiang Provincial Public Technology Research (2017C33054)
This publication has 31 references indexed in Scilit:
- Next-Generation Access Control for Distributed Control SystemsIEEE Internet Computing, 2016
- Resiliency Policies in Access Control Revisited2016
- A Genetic Algorithm Based Data Replica Placement Strategy for Scientific Applications in CloudsIEEE Transactions on Services Computing, 2015
- Towards complexity analysis of User Authorization Query problem in RBACComputers & Security, 2015
- Mining Attribute-Based Access Control PoliciesIEEE Transactions on Dependable and Secure Computing, 2014
- Specifying and enforcing the principle of least privilege in role‐based access controlConcurrency and Computation: Practice and Experience, 2011
- Resiliency Policies in Access ControlACM Transactions on Information and System Security, 2009
- The domatic number problemDiscrete Mathematics, 1994
- A Comparison of Commercial and Military Computer Security Policies1987
- Protection in operating systemsCommunications of the ACM, 1976