{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,27]],"date-time":"2026-01-27T08:28:25Z","timestamp":1769502505197,"version":"3.49.0"},"reference-count":50,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2021,12,12]],"date-time":"2021-12-12T00:00:00Z","timestamp":1639267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004530","name":"Universiti Putra Malaysia","doi-asserted-by":"publisher","award":["Fundamental Research Grant"],"award-info":[{"award-number":["Fundamental Research Grant"]}],"id":[{"id":"10.13039\/501100004530","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>Policy evaluation is a process to determine whether a request submitted by a user satisfies the access control policies defined by an organization. Naming heterogeneity between the attribute values of a request and a policy is common due to syntactic variations and terminological variations, particularly among organizations of a distributed environment. Existing policy evaluation engines employ a simple string equal matching function in evaluating the similarity between the attribute values of a request and a policy, which are inaccurate, since only exact match is considered similar. This work proposes several matching functions which are not limited to the string equal matching function that aim to resolve various types of naming heterogeneity. Our proposed solution is also capable of supporting symmetrical architecture applications, in which the organization can negotiate with the users for the release of their resources and properties that raise privacy concerns. The effectiveness of the proposed matching functions on real XACML policies, designed for universities, conference management, and the health care domain, is evaluated. The results show that the proposed solution has successfully achieved higher percentages of Recall and F-measure compared with the standard Sun\u2019s XACML implementation, with our improvement, these measures gained up to 70% and 57%, respectively.<\/jats:p>","DOI":"10.3390\/sym13122394","type":"journal-article","created":{"date-parts":[[2021,12,13]],"date-time":"2021-12-13T01:29:33Z","timestamp":1639358973000},"page":"2394","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["An Effective Naming Heterogeneity Resolution for XACML Policy Evaluation in a Distributed Environment"],"prefix":"10.3390","volume":"13","author":[{"given":"Teo Poh","family":"Kuang","sequence":"first","affiliation":[{"name":"Faculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9900-0531","authenticated-orcid":false,"given":"Hamidah","family":"Ibrahim","sequence":"additional","affiliation":[{"name":"Faculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9556-9045","authenticated-orcid":false,"given":"Fatimah","family":"Sidi","sequence":"additional","affiliation":[{"name":"Faculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0543-3329","authenticated-orcid":false,"given":"Nur Izura","family":"Udzir","sequence":"additional","affiliation":[{"name":"Faculty of Computer Science and Information Technology, Universiti Putra Malaysia, Serdang 43400, Malaysia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3279-9366","authenticated-orcid":false,"given":"Ali A.","family":"Alwan","sequence":"additional","affiliation":[{"name":"School of Theoretical & Applied Science, Ramapo College of New Jersey, Mahwah, NJ 07430, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,12,12]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"607","DOI":"10.1016\/S0306-4379(01)00042-4","article-title":"Learning object identification rules for information integration","volume":"26","author":"Tejada","year":"2001","journal-title":"Inf. Syst."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"301","DOI":"10.1109\/TETC.2015.2502429","article-title":"SafeProtect: Controlled Data Sharing With User-Defined Policies in Cloud-Based Collaborative Environment","volume":"4","author":"Thilakanathan","year":"2015","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"ref_3","first-page":"1","article-title":"Interconnected Cloud Computing Environments: Challenges, Taxonomy, and Survey","volume":"7","author":"Toosi","year":"2014","journal-title":"J. ACM Comput. Surv."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1142\/S0218843013500044","article-title":"A Semantic Security Framework for Systems of Systems","volume":"22","author":"Trivellato","year":"2013","journal-title":"Int. J. Coop. Inf. Syst."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Trivellato, D., Spiessens, F., Zannone, N., and Etalle, S. (2009, January 20\u201322). POLIPO: Policies & Ontologies for Interoperability, Portability, and Autonomy. Proceedings of the 10th IEEE International Conference on Policies for Distributed Systems and Networks (POLICY), London, UK.","DOI":"10.1109\/POLICY.2009.19"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Castano, S., Ferrara, A., Montanelli, S., and Racca, G. (2004, January 17\u201319). Semantic Information Interoperability in Open Networked Systems. Proceedings of the International Conference on Semantics of a Networked World (LCSNW), Paris, France.","DOI":"10.1007\/978-3-540-30145-5_13"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"238","DOI":"10.1007\/s10916-016-0581-7","article-title":"Semantically Enriched Data Access Policies in eHealth","volume":"40","author":"Drozdowicz","year":"2016","journal-title":"J. Med. Syst."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"2575","DOI":"10.1109\/TKDE.2015.2415473","article-title":"XACML Policy Evaluation with Dynamic Context Handling","volume":"27","author":"Ammar","year":"2015","journal-title":"J. IEEE Trans. Knowl. Data Eng."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1802","DOI":"10.1109\/TC.2010.274","article-title":"Designing Fast and Scalable XACML Policy Evaluation Engines","volume":"60","author":"Liu","year":"2010","journal-title":"IEEE Trans. Comput."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.cose.2014.11.003","article-title":"Decision Diagrams for XACML Policy Evaluation and Management","volume":"49","author":"Ngo","year":"2015","journal-title":"J. Comput. Secur."},{"key":"ref_11","unstructured":"Proctor, S. (2017, March 29). Sun\u2019s XACML Implementation. Available online: http:\/\/sunxacml.sourceforge.net."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Ciuciu, I., Zhao, G., Chadwick, D.W., Reul, Q., Meersman, R., Vasquez, C., Hibbert, M., Winfield, S., and Kirkham, T. (2011, January 7\u201310). Ontology based Interoperation for Securely Shared Services: Security Concept Matching for Authorization Policy Interoperability. Proceedings of the 4th IFIP International Conference on New Technologies, Mobility and Security (NTMS), Paris, France.","DOI":"10.1109\/NTMS.2011.5721052"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Ferrini, R., and Bertino, E. (2009, January 3\u20135). Supporting RBAC with XACML+OWL. Proceedings of the 14th ACM Symposium on Access Control Models and Technologies (SACMAT), Stresa, Italy.","DOI":"10.1145\/1542207.1542231"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Hu, L., Ying, S., Jia, X., and Zhao, K. (2009, January 1\u20134). Towards an Approach of Semantic Access Control for Cloud Computing. Proceedings of the 1st IEEE International Conference on Cloud Computing, Beijing, China.","DOI":"10.1007\/978-3-642-10665-1_13"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"214","DOI":"10.1016\/j.csi.2010.03.011","article-title":"Ontology based policy interoperability in geo-spatial domain","volume":"33","author":"Husain","year":"2011","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Mohan, A., Blough, D.M., Kurc, T., Post, A., and Saltz, J. (2011, January 12\u201315). Detection of Conflicts and Inconsistencies in Taxonomy based Authorization Policies. Proceedings of the 2011 IEEE International Conference on Bioinformatics and Biomedicine (BIBM), Atlanta, GA, USA.","DOI":"10.1109\/BIBM.2011.79"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"27","DOI":"10.4304\/jsw.2.1.27-38","article-title":"Supporting Attribute based Access Control in Authorization and Authentication Infrastructures with Ontologies","volume":"2","author":"Priebe","year":"2007","journal-title":"J. Softw."},{"key":"ref_18","unstructured":"Takabi, H. (2013). A Semantic based Policy Management Framework for Cloud Computing Environments. [Ph.D. Thesis, University of Pittsburgh]."},{"key":"ref_19","unstructured":"Zhao, H. (2012). Security Policy Definition and Enforcement in Distributed Systems. [Ph.D. Thesis, Columbia University]."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"1","DOI":"10.4018\/jsse.2012100101","article-title":"A Practical Framework for Policy Composition and Conflict Resolution","volume":"3","author":"Dia","year":"2012","journal-title":"Int. J. Secur. Softw. Eng."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"3454","DOI":"10.1109\/ACCESS.2016.2585185","article-title":"Automated Policy Combination for Secure Data Sharing in Cross-Organizational Collaborations","volume":"4","author":"Duan","year":"2016","journal-title":"IEEE Access"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"52","DOI":"10.4018\/IJTD.2018100104","article-title":"Generic Access Control Model and Semantic Mapping Between Heterogeneous Policies","volume":"9","author":"Haguouche","year":"2018","journal-title":"Int. J. Technol. Diffus."},{"key":"ref_23","unstructured":"Ioannidis, S. (2005). Security Policy Consistency and Distributed Evaluation in Heterogeneous Environments. [Ph.D. Thesis, University of Pennsylvania]."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1330295.1330299","article-title":"XACML Policy Integration Algorithms","volume":"11","author":"Mazzoleni","year":"2008","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1016\/j.cose.2010.10.006","article-title":"Fine-grained integration of access control policies","volume":"30","author":"Rao","year":"2011","journal-title":"Comput. Secur."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1557","DOI":"10.1109\/TKDE.2005.185","article-title":"Secure interoperation in a multidomain environment employing RBAC policies","volume":"17","author":"Shafiq","year":"2005","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_27","unstructured":"Ferrini, R. (2009). EXAMS: An Analysis Tool for Multidomain Policy Sets. [Ph.D. Thesis, University of Bologna]."},{"key":"ref_28","unstructured":"Kalam, A.A.E., Deswarte, Y., Baina, A., and Kaaniche, M. (2007, January 9\u201313). Access Control for Collaborative Systems: A Web Services based Approach. Proceedings of the IEEE International Conference on Web Services (ICWS), Salt Lake City, UT, USA."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1946","DOI":"10.1109\/TKDE.2012.174","article-title":"A Similarity Measure for Comparing XACML Policies","volume":"25","author":"Lin","year":"2012","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Lin, D., Rao, P., Bertino, E., and Lobo, J. (2007, January 20\u201322). An Approach to Evaluate Policy Similarity. Proceedings of the 12th ACM symposium on Access Control Models and Technologies (SACMAT), Sophia Antipolis, France.","DOI":"10.1145\/1266840.1266842"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"16081","DOI":"10.1007\/s00500-020-04925-5","article-title":"XACBench: A XACML policy benchmark","volume":"24","author":"Ahmadi","year":"2020","journal-title":"Soft Comput."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1016\/j.knosys.2019.03.015","article-title":"Establishment of rule dictionary for efficient XACML policy management","volume":"175","author":"Deng","year":"2019","journal-title":"Knowl. Based Syst."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1016\/j.knosys.2017.12.004","article-title":"Establishment of attribute bitmaps for efficient XACML policy evaluation","volume":"143","author":"Deng","year":"2018","journal-title":"Knowl. Based Syst."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1016\/j.cose.2014.10.004","article-title":"Managing XACML Systems in Distributed Environments through Meta-Policies","volume":"48","year":"2015","journal-title":"Comput. Secur."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1142\/S0218843020400018","article-title":"A Graph and Clustering-Based Framework for Efficient XACML Policy Evaluation","volume":"29","author":"Li","year":"2020","journal-title":"Int. J. Coop. Inf. Syst."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Marfia, F., Neri, M.A., Pellegrini, F., and Colombetti, M. (2015, January 20\u201322). Using OWL Reasoning for Evaluating XACML Policies. Proceedings of the International Conference on E-Business and Telecommunications, Colmar, France.","DOI":"10.1007\/978-3-319-30222-5_16"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1016\/j.compeleceng.2015.09.021","article-title":"From model-driven specification to design-level set-based analysis of XACML policies","volume":"52","author":"Mourad","year":"2016","journal-title":"Comput. Electr. Eng."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"165","DOI":"10.1016\/j.eswa.2014.07.031","article-title":"SBA-XACML: Set-based Approach Providing Efficient Policy Decision Process for Accessing Web Services","volume":"42","author":"Mourad","year":"2014","journal-title":"Expert Syst. Appl."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.ijcip.2018.08.005","article-title":"A policy model for access control using building information models","volume":"23","author":"Skandhakumar","year":"2018","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/j.cose.2017.01.009","article-title":"Formal analysis of XACML policies using SMT","volume":"66","author":"Turkmen","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_41","first-page":"146","article-title":"A Survey of Schema-based Matching Approaches","volume":"3730","author":"Shvaiko","year":"2005","journal-title":"J. Data Semant. IV"},{"key":"ref_42","unstructured":"Kuang, T.P., Ibrahim, H., Sidi, F., and Udzir, N.I. (2014, January 17). Heterogeneity XACML Policy Evaluation Engine. Proceedings of the Malaysian National Conference of Databases (MaNCoD), Selangor, Malaysia."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Do, H.-H., Melnik, S., and Rahm, E. (2003, January 7\u201310). Comparison of Schema Matching Evaluations. Proceedings of the Web, Web-Services, and Database Systems, Erfurt, Germany.","DOI":"10.1007\/3-540-36560-5_17"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"870","DOI":"10.4304\/jcp.5.6.870-877","article-title":"An Iterative Method of Extracting Chinese ISA Relations for Ontology Learning","volume":"5","author":"Liu","year":"2010","journal-title":"J. Comput."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Mohan, A., and Blough, D.M. (2010, January 13\u201315). An Attribute-based Authorization Policy Framework with Dynamic Conflict Resolution. Proceedings of the 9th Symposium on Identity and Trust on the Internet (IDTRUST), Gaithersburg, MD, USA.","DOI":"10.1145\/1750389.1750395"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1145\/219717.219748","article-title":"WordNet: A Lexical Database for English","volume":"38","author":"Miller","year":"1995","journal-title":"J. Commun. ACM"},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Sabou, M., Lopez, V., and Motta, E. (2006, January 2\u20136). Ontology Selection for the Real Semantic Web: How to Cover the Queen\u2019s Birthday Dinner?. Proceedings of the 15th International Conference on Managing Knowledge in a World of Networks (EKAW\u201906), Pod\u00eabrady, Czech Republic.","DOI":"10.1007\/11891451_12"},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"45","DOI":"10.1016\/j.jnca.2016.12.001","article-title":"Elimination of Policy Conflict to Improve the PDP Evaluation Performance","volume":"80","author":"Deng","year":"2017","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_49","unstructured":"Stoller, S.D., Yang, P., Ramakrishnan, C.R., and Gofman, M.I. (November, January 31). Efficient Policy Analysis for Administrative Role Based Access Control. Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS), Alexandria, VA, USA."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Martin, E., Xie, T., and Yu, T. (2006, January 4\u20137). Defining and Measuring Policy Coverage in Testing Access Control Policies. Proceedings of the International Conference on Information and Communications Security (ICICS), Raleigh, NC, USA.","DOI":"10.1007\/11935308_11"}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/13\/12\/2394\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T07:45:50Z","timestamp":1760168750000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/13\/12\/2394"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,12]]},"references-count":50,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2021,12]]}},"alternative-id":["sym13122394"],"URL":"https:\/\/doi.org\/10.3390\/sym13122394","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,12,12]]}}}