Access control

Operating system

Distributed computing

Artificial intelligence

Control (management)

Computer science

Cloud computing

Computer security

International Journal of Engineering Research and Technology

Access control is essential to protect data and system resources by preventing unauthorized access.Cloud computing ensures that users get benefit from such resources by following their requests.Hence, users can access applications, programs, and storage.Data security is a significant concern to be dealt with in the cloud computing area.The dispersion of data across multiple storage devices in cloud computing and abundant access from heterogeneous devices pose serious security threats.Therefore, the protection of data and resources using proper access control mechanisms is a critical task for cloud service providers.Various access control approaches and models for cloud computing have been suggested in existing research , however; security breaches in these approaches cause great threats for cloud service providers.Based on the analysis of existing works, we proposed that the combination of multiple approaches is the best solution to ensure access control according to users' requirements and to the network conditions.Hence, concerning the analysis conducted on related works, we propose a hybrid approach based on the Attribute-based-Access-control and Role-Based-Access-Control models.Our approach combines the best features of these models and ensures both security and flexibility.Compared to the conventional models, the proposed approach defines different security levels via the assignment of a different number of attributes for each role by guaranteeing the least privilege concept.

A Novel Hybrid Approach for Access Control in Cloud Computing