Queuing Theoretic Analysis of Dynamic Attribute-Based Access Control Systems.

Access resolution in Attribute-based Access Control (ABAC) is primarily through the enforcement of an ABAC policy. However, incremental user-specific authorizations are also often added to supplement the attribute-based accesses. As this auxiliary list of authorizations grows, enforcement becomes increasingly more inefficient, since both the ABAC policy and the specific authorizations are to be evaluated.