ACGreGate：一个弱一致性数据库应用的实用访问控制框架
ACGreGate: A Framework for Practical Access Control for Applications using Weakly Consistent Databases
摘要：
与传统的关系数据库系统相比，可伸缩和高可用性系统通常需要提供较弱一致性保证的数据存储。这些应用程序的正确性高度依赖于应用程序模型对数据不一致的弹性。特别是在应用程序安全方面，很难确定哪些不一致是可以容忍的，哪些可能导致安全漏洞。在本文中，我们讨论的问题，如何开发一个访问控制层的应用程序使用弱一致的数据存储，而不失去的性能优势，通过使用较弱的一致性模型。我们提出ACGreGate，一个Java框架，用于实现正确的访问控制层的应用程序使用弱一致的数据存储。在对数据存储的某些要求下，ACGreGate确保访问控制层在动态适应的安全策略方面正确运行。我们使用ACGreGate实现了一个学生管理系统的访问控制层。这个案例研究表明，实际上有用的安全策略可以实现的框架产生很少的开销。与使用集中式服务器的设置进行比较，显示了使用ACGreGate的好处，可以使服务的可伸缩性扩展到地理范围。
英文摘要：
Scalable and highly available systems often require data stores that offer weaker consistency guarantees than traditional relational databases systems. The correctness of these applications highly depends on the resilience of the application model against data inconsistencies. In particular regarding application security, it is difficult to determine which inconsistencies can be tolerated and which might lead to security breaches. In this paper, we discuss the problem of how to develop an access control layer for applications using weakly consistent data stores without loosing the performance benefits gained by using weaker consistency models. We present ACGreGate, a Java framework for implementing correct access control layers for applications using weakly consistent data stores. Under certain requirements on the data store, ACGreGate ensures that the access control layer operates correctly with respect to dynamically adaptable security policies. We used ACGreGate to implement the access control layer of a student management system. This case study shows that practically useful security policies can be implemented with the framework incurring little overhead. A comparison with a setup using a centralized server shows the benefits of using ACGreGate for scalability of the service to geo-scale.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
