<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//TaxonX//DTD Taxonomic Treatment Publishing DTD v0 20100105//EN" "../../nlm/tax-treatment-NS0.dtd">
<article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:tp="http://www.plazi.org/taxpub" article-type="research-article" dtd-version="3.0" xml:lang="en">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher-id">109</journal-id>
      <journal-id journal-id-type="index">urn:lsid:arphahub.com:pub:3dc5f44e-8666-58db-bc76-a455210e8891</journal-id>
      <journal-title-group>
        <journal-title xml:lang="en">JUCS - Journal of Universal Computer Science</journal-title>
        <abbrev-journal-title xml:lang="en">jucs</abbrev-journal-title>
      </journal-title-group>
      <issn pub-type="ppub">0948-695X</issn>
      <issn pub-type="epub">0948-6968</issn>
      <publisher>
        <publisher-name>Journal of Universal Computer Science</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.3217/jucs-024-04-0392</article-id>
      <article-id pub-id-type="publisher-id">23146</article-id>
      <article-categories>
        <subj-group subj-group-type="heading">
          <subject>Research Article</subject>
        </subj-group>
        <subj-group subj-group-type="scientific_subject">
          <subject>D.4.6 - Security and Protection</subject>
          <subject>H.1 - MODELS AND PRINCIPLES</subject>
          <subject>K.6.5 - Security and Protection</subject>
        </subj-group>
      </article-categories>
      <title-group>
        <article-title>A New Hybrid Access Control Model for Security Policies in Multimodal Applications Environments</article-title>
      </title-group>
      <contrib-group content-type="authors">
        <contrib contrib-type="author" corresp="yes">
          <name name-style="western">
            <surname>Attia</surname>
            <given-names>Hasiba Ben</given-names>
          </name>
          <email xlink:type="simple">ben.attia.hasiba@gmail.com</email>
          <xref ref-type="aff" rid="A1">1</xref>
        </contrib>
        <contrib contrib-type="author" corresp="no">
          <name name-style="western">
            <surname>Kahloul</surname>
            <given-names>Laid</given-names>
          </name>
          <xref ref-type="aff" rid="A1">1</xref>
        </contrib>
        <contrib contrib-type="author" corresp="no">
          <name name-style="western">
            <surname>Benharzallah</surname>
            <given-names>Saber</given-names>
          </name>
          <xref ref-type="aff" rid="A2">2</xref>
        </contrib>
      </contrib-group>
      <aff id="A1">
        <label>1</label>
        <addr-line content-type="verbatim">Biskra University, Biskra, Algeria</addr-line>
        <institution>Biskra University</institution>
        <addr-line content-type="city">Biskra</addr-line>
        <country>Algeria</country>
      </aff>
      <aff id="A2">
        <label>2</label>
        <addr-line content-type="verbatim">Batna 2 University, Batna, Algeria</addr-line>
        <institution>Batna 2 University</institution>
        <addr-line content-type="city">Batna</addr-line>
        <country>Algeria</country>
      </aff>
      <author-notes>
        <fn fn-type="corresp">
          <p>Corresponding author: Hasiba Ben Attia (<email xlink:type="simple">ben.attia.hasiba@gmail.com</email>).</p>
        </fn>
        <fn fn-type="edited-by">
          <p>Academic editor: </p>
        </fn>
      </author-notes>
      <pub-date pub-type="collection">
        <year>2018</year>
      </pub-date>
      <pub-date pub-type="epub">
        <day>28</day>
        <month>04</month>
        <year>2018</year>
      </pub-date>
      <volume>24</volume>
      <issue>4</issue>
      <fpage>392</fpage>
      <lpage>416</lpage>
      <uri content-type="arpha" xlink:href="http://openbiodiv.net/F830CA3C-4663-5B4A-AD55-8D6ECB1C6CBA">F830CA3C-4663-5B4A-AD55-8D6ECB1C6CBA</uri>
      <uri content-type="zenodo_dep_id" xlink:href="https://zenodo.org/record/5505061">5505061</uri>
      <history>
        <date date-type="received">
          <day>15</day>
          <month>12</month>
          <year>2017</year>
        </date>
        <date date-type="accepted">
          <day>15</day>
          <month>04</month>
          <year>2018</year>
        </date>
      </history>
      <permissions>
        <copyright-statement>Hasiba Ben Attia, Laid Kahloul, Saber Benharzallah</copyright-statement>
        <license license-type="creative-commons-attribution" xlink:href="" xlink:type="simple">
          <license-p>This article is freely available under the J.UCS Open Content License.</license-p>
        </license>
      </permissions>
      <abstract>
        <label>Abstract</label>
        <p>New technologies as cloud computing and internet of things (IoT) has expanded the range of multimodal applications. This expansion, in several computing and heterogeneous environments, makes access control an important issue in multimodal applications. Indeed, a variety of access control models have been developed to address different aspects of security problems. The two most popular basic models are: Role Based Access Control (RBAC) and Attribute Based Access Control (ABAC). The both models RBAC and ABAC have their specific features and they can complement each other. For that, providing a hybrid model which considers both concepts "roles" as well as "attributes" has become an important research topic. This paper proposes a new access control model based principally on roles, attributes, access modes and the type of resources. An empirical method is applied to compare the new proposed model versus three existing models: RBAC, ABAC, and the hybrid model Attribute Enhanced RBAC (AERBAC). The results of the empirical method demonstrate that the new proposed model acquires the advantages of the two models RBAC and ABAC and avoids their limitations. In fact, the new proposed model reduces the complexity of security policies and allows expressing the fine granularity of systems without any explosion in the number of roles or rules in the security policy.</p>
      </abstract>
    </article-meta>
  </front>
</article>
