A Trust-based BYOD Access Control Framework using Fuzzy Logic Luay
Background: Bring Your Own Device (BYOD) is new approach that are being adopted increasingly by organizations. The idea behind BYOD is to allow employees to use their personal devices to reduce organizational cost and enhance their job satisfaction However, BYOD comes with challenges mainly related to security hence hindering the spread and acceptance of BYOD in corporate environments. To solve this issue, the security mechanism needs to be upgraded to meet the challenges and threats in BYOD environments. A trust based access control (TBAC) system with multiple factors is required to enhance the BYOD security. This mechanism provides more dynamic and flexible method of granting, controlling and guarding the access. Using multi-factor access control mechanism, interactions in nodes or within nodes can be monitored in a better way. These factors are interaction behavior, node history (or reputation), and recommendation. This will increase the mutual trust between system and devices as well as between employee and employer. This will also increase the productivity of the organizations. Fuzzy trust model was developed and implemented using MATLAB 8.3.0 to validate and assess the proposed model. Trust is computed based on fuzzy logic which will be part of the access control mechanism. Fuzzy logic employed based on fuzzy sets (linguistic values) and the range of sets. The results of simulation show the significant impacts of trust factors on the access decision.