Performance evaluation of XACML PDP implementations

  • Authors:
  • Fatih Turkmen;Bruno Crispo

  • Affiliations:
  • University of Trento, Trento, Italy;University of Trento, Trento, Italy

  • Venue:
  • Proceedings of the 2008 ACM workshop on Secure web services
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

eXtensible Access Control Markup Language (XACML), an OASIS standard, is the most widely used policy specifica- tion language for access control. Its simplicity in syntax and strength in coverage makes it suitable for diverse en- vironments such as Service Oriented Architectures (SOAs) and P2P systems. There are different implementations of XACML available. Some of these implementations are open source and some others are proprietary. In this work we intended to shed some lights to the performance issues of XACML engines. We tested 3 open source XACML implementations with different policy/request settings. Our experiments revealed some important points to be taken into consideration when deploying an XACML based access control system. Besides, our results can be used as hints by policy writers and system developers for deploying efficient authorization services.