{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T18:00:00Z","timestamp":1784743200613,"version":"3.55.0"},"reference-count":51,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,7,1]],"date-time":"2025-07-01T00:00:00Z","timestamp":1751328000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2025,3,22]],"date-time":"2025-03-22T00:00:00Z","timestamp":1742601600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000144","name":"National Science Foundation Division of Computer and Network Systems","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000057","name":"NIH National Institute of General Medical Sciences","doi-asserted-by":"publisher","award":["R35GM134927"],"award-info":[{"award-number":["R35GM134927"]}],"id":[{"id":"10.13039\/100000057","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000002","name":"National Institutes of Health","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000002","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2333225"],"award-info":[{"award-number":["CNS-2333225"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2020-220329 (3696"],"award-info":[{"award-number":["2020-220329 (3696"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100004351","name":"Cisco Systems Inc","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100004351","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computers & Security"],"published-print":{"date-parts":[[2025,7]]},"DOI":"10.1016\/j.cose.2025.104432","type":"journal-article","created":{"date-parts":[[2025,3,21]],"date-time":"2025-03-21T08:12:29Z","timestamp":1742544749000},"page":"104432","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":7,"special_numbering":"C","title":["Performance analysis of dynamic ABAC systems using a queuing theoretic framework"],"prefix":"10.1016","volume":"154","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-6346-0198","authenticated-orcid":false,"given":"Gaurav","family":"Madkaikar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1462-922X","authenticated-orcid":false,"given":"Karthikeya S.M.","family":"Yelisetty","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4315-7329","authenticated-orcid":false,"given":"Shamik","family":"Sural","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7420-6947","authenticated-orcid":false,"given":"Jaideep","family":"Vaidya","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2068-780X","authenticated-orcid":false,"given":"Vijayalakshmi","family":"Atluri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.cose.2025.104432_b1","doi-asserted-by":"crossref","unstructured":"Abouzaid, L., Sabir, E., Errami, A., Elbiaze, H., 2019. A Queuing Theoretic Framework for Flying Mesh Network Assisted IoT Environments. In: 2019 IEEE 5th World Forum Internet Things ( WF- IoT). pp. 882\u2013887.","DOI":"10.1109\/WF-IoT.2019.8767354"},{"key":"10.1016\/j.cose.2025.104432_b2","doi-asserted-by":"crossref","unstructured":"Abu Jabal, A., Bertino, E., Lobo, J., Law, M., Russo, A., Calo, S., Verma, D., 2020. Polisma-a framework for learning attribute-based access control policies. In: 25th European Symposium on Research in Computer Security. pp. 523\u2013544.","DOI":"10.1007\/978-3-030-58951-6_26"},{"key":"10.1016\/j.cose.2025.104432_b3","doi-asserted-by":"crossref","unstructured":"Aggarwal, N., Sural, S., 2023. RanSAM: Randomized Search for ABAC Policy Mining. In: ACM Conference on Data and Applciation Security and Privacy. ISBN: 9798400700675, pp. 291\u2014-293.","DOI":"10.1145\/3577923.3585050"},{"key":"10.1016\/j.cose.2025.104432_b4","first-page":"1","article-title":"An efficient healthcare chain design for resolving the patient scheduling problem: queuing theory and MILP-ASA optimization approach","author":"Ala","year":"2023","journal-title":"Ann. Oper. Res."},{"key":"10.1016\/j.cose.2025.104432_b5","doi-asserted-by":"crossref","first-page":"108965","DOI":"10.1109\/ACCESS.2022.3213645","article-title":"Integrating cyber deception into attribute-based access control (ABAC) for insider threat detection","volume":"10","author":"Alohaly","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.cose.2025.104432_b6","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101080","article-title":"Combo-chain: Towards a hierarchical attribute-based access control system for IoT with smart contract and sharding technique","volume":"25","author":"Bakhtiary","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.cose.2025.104432_b7","series-title":"Information Systems Security","first-page":"99","article-title":"Policy reconciliation and migration in attribute based access control","author":"Batra","year":"2019"},{"key":"10.1016\/j.cose.2025.104432_b8","series-title":"Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy","first-page":"185","article-title":"Incremental maintenance of ABAC policies","author":"Batra","year":"2021"},{"key":"10.1016\/j.cose.2025.104432_b9","series-title":"Data Networks","author":"Bertsekas","year":"1992"},{"key":"10.1016\/j.cose.2025.104432_b10","doi-asserted-by":"crossref","first-page":"000143","DOI":"10.1109\/ISCC.2013.6754936","article-title":"T-ABAC: An attribute-based access control model for real-time availability in highly dynamic systems","author":"Burmester","year":"2013","journal-title":"2013 IEEE Symp. Comput. Commun. ( ISCC)"},{"key":"10.1016\/j.cose.2025.104432_b11","doi-asserted-by":"crossref","first-page":"1622","DOI":"10.1109\/ICDE.2019.00157","article-title":"A queueing-theoretic framework for vehicle dispatching in dynamic car-hailing","author":"Cheng","year":"2019","journal-title":"2019 IEEE 35th Int. Conf. Data Eng. ( ICDE)"},{"issue":"2","key":"10.1016\/j.cose.2025.104432_b12","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1109\/LOCS.2018.2889980","article-title":"Hype: A hybrid approach toward policy engineering in attribute-based access control","volume":"1","author":"Das","year":"2018","journal-title":"IEEE Lett. Comput. Soc."},{"key":"10.1016\/j.cose.2025.104432_b13","doi-asserted-by":"crossref","unstructured":"Das, S., Sural, S., Vaidya, J., Atluri, V., 2018b. Using Gini Impurity to Mine Attribute-based Access Control Policies with Environment Attributes. In: Proceedings of the 23nd ACM Symposium on Access Control Models and Technologies. ISBN: 9781450356664, pp. 213\u2013215.","DOI":"10.1145\/3205977.3208949"},{"issue":"1","key":"10.1016\/j.cose.2025.104432_b14","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1007\/BF01149327","article-title":"Queueing systems with vacations\u2014a survey","volume":"1","author":"Doshi","year":"1986","journal-title":"Queueing Syst. Theory Appl."},{"key":"10.1016\/j.cose.2025.104432_b15","doi-asserted-by":"crossref","unstructured":"Gautam, M., Jha, S., Sural, S., Vaidya, J., Atluri, V., 2017. Poster: Constrained Policy Mining in Attribute Based Access Control. In: Proceedings of the 22nd ACM on Symposium on Access Control Models and Technologies. ISBN: 9781450347020, pp. 121\u2013123.","DOI":"10.1145\/3078861.3084163"},{"key":"10.1016\/j.cose.2025.104432_b16","doi-asserted-by":"crossref","unstructured":"Goyal, G., Liu, P., Sural, S., 2022. Securing Smart Home IoT Systems with Attribute-Based Access Control. In: ACM Workshop on Secure and Trustworthy Cyber-Physical Systems. ISBN: 9781450392297, pp. 37\u201346.","DOI":"10.1145\/3510547.3517920"},{"issue":"1","key":"10.1016\/j.cose.2025.104432_b17","doi-asserted-by":"crossref","first-page":"208","DOI":"10.1109\/TETC.2022.3193577","article-title":"Enabling attribute-based access control in NoSQL databases","volume":"11","author":"Gupta","year":"2023","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"10.1016\/j.cose.2025.104432_b18","series-title":"Performance Modeling and Design of Computer Systems: Queueing Theory in Action","author":"Harchol-Balter","year":"2013"},{"issue":"8","key":"10.1016\/j.cose.2025.104432_b19","doi-asserted-by":"crossref","first-page":"461","DOI":"10.1145\/360303.360333","article-title":"Protection in operating systems","volume":"19","author":"Harrison","year":"1976","journal-title":"Commun. ACM"},{"issue":"162","key":"10.1016\/j.cose.2025.104432_b20","first-page":"1","article-title":"Guide to attribute based access control (abac) definition and considerations (draft)","volume":"800","author":"Hu","year":"2013","journal-title":"NIST Spec. Publ."},{"key":"10.1016\/j.cose.2025.104432_b21","doi-asserted-by":"crossref","unstructured":"Iyer, P., Masoumzadeh, A., 2018. Mining Positive and Negative Attribute-Based Access Control Policy Rules. In: ACM Symposium on Access Control Models and Technologies. pp. 161\u2013172.","DOI":"10.1145\/3205977.3205988"},{"key":"10.1016\/j.cose.2025.104432_b22","series-title":"Proceedings of the Thirteenth ACM Conference on Data and Application Security and Privacy, CODASPY 2023, Charlotte, NC, USA, April 24-26, 2023","first-page":"263","article-title":"FLAP - a federated learning framework for attribute-based access control policies","author":"Jabal","year":"2023"},{"key":"10.1016\/j.cose.2025.104432_b23","doi-asserted-by":"crossref","first-page":"1453","DOI":"10.1111\/poms.13675","article-title":"A queueing-theoretic framework for evaluating transmission risks in service facilities during a pandemic","volume":"32","author":"Kang","year":"2021","journal-title":"Prod. Oper. Manage."},{"issue":"1","key":"10.1016\/j.cose.2025.104432_b24","doi-asserted-by":"crossref","first-page":"1047","DOI":"10.1007\/s10586-023-04038-2","article-title":"Attribute-based access control scheme for secure storage and sharing of EHRs using blockchain and IPFS","volume":"27","author":"Kaur","year":"2024","journal-title":"Clust. Comput."},{"key":"10.1016\/j.cose.2025.104432_b25","doi-asserted-by":"crossref","DOI":"10.3390\/math8050824","article-title":"Queuing system with two types of customers and dynamic change of a priority","author":"Klimenok","year":"2020","journal-title":"Mathematics"},{"key":"10.1016\/j.cose.2025.104432_b26","article-title":"Performance analysis of a cloud computing system using queuing model with correlated task reneging","volume":"2091","author":"Kumar","year":"2021","journal-title":"J. Physics: Conf. Ser."},{"key":"10.1016\/j.cose.2025.104432_b27","article-title":"Queuing theory of improved practical Byzantine fault tolerant consensus","author":"Ma","year":"2022","journal-title":"Mathematics"},{"key":"10.1016\/j.cose.2025.104432_b28","series-title":"ICT Systems Security and Privacy Protection","first-page":"323","article-title":"Queuing theoretic analysis of dynamic attribute-based access control systems","author":"Madkaikar","year":"2024"},{"issue":"15","key":"10.1016\/j.cose.2025.104432_b29","doi-asserted-by":"crossref","first-page":"44781","DOI":"10.1007\/s11042-023-17052-8","article-title":"Secure monitoring model for smart agriculture using an optimized attribute-based access control centralized authority system","volume":"83","author":"Mahalingam","year":"2024","journal-title":"Multim. Tools Appl."},{"key":"10.1016\/j.cose.2025.104432_b30","doi-asserted-by":"crossref","first-page":"11138","DOI":"10.1007\/s11227-022-04328-3","article-title":"A queuing theory model for fog computing","volume":"78","author":"Mas","year":"2022","journal-title":"J. Supercomput."},{"key":"10.1016\/j.cose.2025.104432_b31","doi-asserted-by":"crossref","unstructured":"Menasce, D., 2000. Scaling for e-business. In: IEEE International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunications Systems. pp. 511\u2013513.","DOI":"10.1109\/MASCOT.2000.876578"},{"key":"10.1016\/j.cose.2025.104432_b32","series-title":"Intelligent Systems","article-title":"Towards ABAC policy mining from logs with deep learning","author":"Mocanu","year":"2015"},{"key":"10.1016\/j.cose.2025.104432_b33","doi-asserted-by":"crossref","DOI":"10.1186\/s42400-019-0024-0","article-title":"A framework for the extended evaluation of ABAC policies","volume":"2","author":"Morisset","year":"2019","journal-title":"Cybersecurity"},{"key":"10.1016\/j.cose.2025.104432_b34","first-page":"25","article-title":"PolTree: A data structure for making efficient access decisions in ABAC","volume":"2019","author":"Nath","year":"2019","journal-title":"Proc ACM Symp Access Control. Model. Technol"},{"key":"10.1016\/j.cose.2025.104432_b35","doi-asserted-by":"crossref","unstructured":"Paul, P., Sural, S., 2021. Towards Efficient Evaluation of ABAC Policies using High-Dimensional Indexing Techniques. In: Third IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications. pp. 243\u2013251.","DOI":"10.1109\/TPSISA52974.2021.00027"},{"issue":"1","key":"10.1016\/j.cose.2025.104432_b36","doi-asserted-by":"crossref","first-page":"45","DOI":"10.3390\/info15010045","article-title":"ABAC policy mining through affiliation networks and biclique analysis","volume":"15","author":"Perez-Haro","year":"2024","journal-title":"Information"},{"issue":"11","key":"10.1016\/j.cose.2025.104432_b37","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1109\/2.241422","article-title":"Lattice-based access control models","volume":"26","author":"Sandhu","year":"1993","journal-title":"Computer"},{"issue":"2","key":"10.1016\/j.cose.2025.104432_b38","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/2.485845","article-title":"Role-based access control models","volume":"29","author":"Sandhu","year":"1996","journal-title":"Computer"},{"key":"10.1016\/j.cose.2025.104432_b39","doi-asserted-by":"crossref","unstructured":"Schlegel, M., Amthor, P., 2021. The Missing Piece of the ABAC Puzzle: A Modeling Scheme for Dynamic Analysis. In: International Conference on Security and Cryptography.","DOI":"10.5220\/0010556200002998"},{"key":"10.1016\/j.cose.2025.104432_b40","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103717","article-title":"ABAC policy mining method based on hierarchical clustering and relationship extraction","volume":"139","author":"Shang","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.cose.2025.104432_b41","series-title":"Fundamentals of queueing theory","author":"Shortle","year":"2018"},{"key":"10.1016\/j.cose.2025.104432_b42","first-page":"25","article-title":"Rew-XAC: An approach to rewriting request for elastic ABAC enforcement with dynamic policies","author":"Son","year":"2016","journal-title":"2016 Int. Conf. Adv. Comput. Applications ( ACOMP)"},{"key":"10.1016\/j.cose.2025.104432_b43","series-title":"Probability, Markov Chains, Queues, and Simulation: The Mathematical Basis of Performance Modeling","author":"Stewart","year":"2009"},{"key":"10.1016\/j.cose.2025.104432_b44","series-title":"Queueing Analysis: A Foundation of Performance Evaluation","article-title":"Queueing Analysis: Discrete-time systems","author":"Takagi","year":"1991"},{"key":"10.1016\/j.cose.2025.104432_b45","series-title":"Proceedings of the 27th ACM on Symposium on Access Control Models and Technologies","first-page":"31","article-title":"Contemporaneous update and enforcement of ABAC policies","author":"Talegaon","year":"2022"},{"key":"10.1016\/j.cose.2025.104432_b46","series-title":"2017 IEEE 3rd International Conference on Collaboration and Internet Computing","first-page":"339","article-title":"Efficient bottom-up mining of attribute based access control policies","author":"Talukdar","year":"2017"},{"key":"10.1016\/j.cose.2025.104432_b47","article-title":"Vacation queueing models theory and applications","author":"Tian","year":"2006","journal-title":"Oper. Res. Manag. Sci."},{"key":"10.1016\/j.cose.2025.104432_b48","doi-asserted-by":"crossref","DOI":"10.3390\/app13116508","article-title":"Mathematical approaches transform cybersecurity from protoscience to science","author":"Trenchev","year":"2023","journal-title":"Appl. Sci."},{"key":"10.1016\/j.cose.2025.104432_b49","doi-asserted-by":"crossref","unstructured":"Uzun, E., Atluri, V., Sural, S., Vaidya, J., Parlato, G., Ferrara, A.L., Parthasarathy, M., 2012. Analyzing temporal role based access control models. In: Proceedings of the 17th ACM Symposium on Access Control Models and Technologies. pp. 177\u2013186.","DOI":"10.1145\/2295136.2295169"},{"key":"10.1016\/j.cose.2025.104432_b50","doi-asserted-by":"crossref","first-page":"1289","DOI":"10.1109\/BIBM55620.2022.9995559","article-title":"Automated extraction of ABAC policies from natural-language documents in healthcare systems","author":"Xia","year":"2022","journal-title":"2022 IEEE Int. Conf. Bioinform. Biomedicine ( BIBM)"},{"issue":"5","key":"10.1016\/j.cose.2025.104432_b51","doi-asserted-by":"crossref","first-page":"533","DOI":"10.1109\/TDSC.2014.2369048","article-title":"Mining attribute-based access control policies","volume":"12","author":"Xu","year":"2015","journal-title":"IEEE Trans. Dependable Secur. Comput."}],"container-title":["Computers & Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S016740482500121X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S016740482500121X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T08:05:13Z","timestamp":1777881913000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S016740482500121X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7]]},"references-count":51,"alternative-id":["S016740482500121X"],"URL":"https:\/\/doi.org\/10.1016\/j.cose.2025.104432","relation":{},"ISSN":["0167-4048"],"issn-type":[{"value":"0167-4048","type":"print"}],"subject":[],"published":{"date-parts":[[2025,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Performance analysis of dynamic ABAC systems using a queuing theoretic framework","name":"articletitle","label":"Article Title"},{"value":"Computers & Security","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.cose.2025.104432","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2025 The Authors. Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"104432"}}