An Access Control Model Based on System Security Risk for Dynamic Sensitive Data Storage in the Cloud

In cloud computing, dynamic storage of data generated by users, applications, tasks, workflows, etc. requires frequent access operations, so traditional encryption cannot be applied in this case. Considering the vulnerability data, its protection needs to consider an efficient and security scheme. data-oriented control, approach is generally static policy matching, which deal with emergencies has problem privileged users. To solve problem, paper proposes a risk-based control model, adds risk assessment attribute-based aims at source from three aspects: subject attribute, resource environment attribute. A set indexes proposed, calculation method quantitatively analyzed combining fuzzy consistency AHP analysis method, finally, realization XACML given. The validity proposed model analyzed, carried out experimental verifies effectiveness. benefits applications that require storage, for example, medical/patient storage.