Thesis Defence: Saurabh Kulkarni (Master of Science in Computer Science)
You are encouraged to attend the defence. The details of the defence and attendance information is included below:
Date: September 8, 2025
Time: 12:00 PM
Defence mode: Remote
Virtual Attendance: via Zoom
Please contact the Office of Graduate Administration for information regarding remote attendance for online defences.
To ensure the defence proceeds with no interruptions, please mute your audio and video on entry and do not inadvertently share your screen. The meeting will be locked to entry 5 minutes after it begins: please ensure you are on time.
Thesis entitled: DTW-ABAC: A DYNAMIC TRUST WEIGHTED-ATTRIBUTE BASED ACCESS CONTROL HYBRID SECURITY MODEL FOR CLOUD APPLICATIONS
Abstract: Modern digital infrastructures require access control systems that protect sensitive data as well as adapt to evolving contexts and user behaviour. While foundational models like Discretionary Access Control (DAC), Mandatory Access Control (MAC), and Role-Based Access Control (RBAC) provide basic enforcement, they lack flexibility, granularity and real-time responsiveness. Attribute-Based Access Control (ABAC) improves granularity by using attribute-driven policies, but standard implementations (XACML and NGAC) each have critical limitations. XACML, though powerful in static policy expression, lacks real-time contextual awareness, while NGAC offers dynamic evaluation but struggles with policy standardization, over-permissiveness and transparency.
To bridge these gaps, this research proposes DTW-ABAC (Dynamic Trust Weighted-Attribute Based Access Control), a hybrid framework that combines XACML's structured policy logic with NGAC's dynamic evaluation capabilities. The framework leverages Microsoft Entra ID for consistent and secure identity and attribute management and introduces a trust scoring system that adjusts user access based on behavioural consistency and historical risk. Weighted attribute evaluation ensures policy flexibility, while scenario-driven testing and detailed audit logs increase transparency and accountability. Comparative analysis shows that the hybrid model delivers more accurate, adaptive, and explainable decisions than standalone XACML or NGAC, making it a strong candidate for enterprise and cloud-scale deployment where contextual nuance and high security reliability are essential.
Defence Committee:
Chair: Dr. Deborah Roberts, University of Northern British Columbia
Supervisor: Dr. Waqar Haque, University of Northern British Columbia
Committee Member: Dr. Andreas Hirt, University of Northern British Columbia
Committee Member: Dr. Peter Jackson, University of Northern British Columbia
External Examiner: Dr. Musfiq Rahman, Thompson Rivers University
Contact Information
Graduate Administration in the Office of the Registrar,
University of Northern British Columbia
Email: grad-office@unbc.ca
Web: https://www2.unbc.ca/graduate-programs