LAUSR

XACML is a precise and complete access control language that defines an architecture to deploy access control services in a fine-grained way. However, when the number and complexity of policies increases, XACML suffers from performance problems. This problem has been analyzed by the research community, and the solutions proposed in the literature aim toward changing how security policies are stored. Many solutions do this by representing XACML policies in a graph data structure. However, these solutions increase performance but drastically decrease functionality. With this in mind, the authors developed a way of modeling and storing XACML policies in a graph database. One of the most striking features of this database is the high performance offered in operations over the data. Therefore, even if security policies are included in this database, the performance property is assured automatically. Moreover, due to the power of the engines and connectors this database offers, all the functions defined by XACML are available. To show our proposals viability, we designed a prototype.