Adaptive context-aware access control for IoT environments leveraging fog computing

Kalaria, Rudri; Kayes, A S M; Rahayu, Wenny; Pardede, Eric; Salehi Shahraki, Ahmad

doi:10.26181/26240600.v1

Adaptive context-aware access control for IoT environments leveraging fog computing

journal contribution

posted on 2024-07-22, 04:29 authored by Rudri KalariaRudri Kalaria, A S M KayesA S M Kayes, Wenny RahayuWenny Rahayu, Eric PardedeEric Pardede, Ahmad Salehi ShahrakiAhmad Salehi Shahraki

The increasing use of the Internet of Things (IoT) has driven the demand for enhanced and robust access control methods to protect resources from unauthorized access. A cloud-based access control approach brings significant challenges in terms of communication overhead, high latency, and complete reliance. In this paper, we propose a Fog-Based Adaptive Context-Aware Access Control (FB-ACAAC) framework for IoT devices, dynamically adjusting access policies based on contextual information to prevent unauthorised resource access. The main purpose of FB-ACAAC is to provide adaptability to changing access behaviors and context by bringing decision-making and information about policies closer to the end nodes of the network. FB-ACAAC improves the availability of resources and reduces the amount of time for information to be processed. FB-ACAAC extends the widely used eXtensible Access Control Markup Language (XACML) to manage access control decisions. Traditional XACML-based methods do not take into account changing environments, different contexts, and changing access behaviors and are vulnerable to certain types of attacks. To address these issues, FB-ACAAC proposes an adaptive context-aware XACML scheme for heterogeneous distributed IoT environments using fog computing and is designed to be context-aware, adaptable, and secure in the face of unauthorised access. The effectiveness of this new scheme is verified through experiments, and it has a low processing time overhead while providing extra features and improved security.

History

Publication Date

2024-08-01

Journal

International Journal of Information Security

Volume

23

Pagination

3089 – 3107

Publisher

Springer Nature

ISSN

1615-5262

Rights Statement

© The Author(s) 2024 This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article’s Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article’s Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/.