A system for risk awareness during role mining

Ahmed, Sharmin; Osborn, Sylvia L.

doi:10.1145/2613087.2613095

Cited by 4 publications

(2 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This decreases the whole system's risk. And then we introduce user trust and user trust threshold in role in order to make sure the proper role is activated and meet the least privilege [4] in RBAC.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

The RBAC System Based on Role Risk and User Trust

Jin¹,

Shen²,

Yu³

2016

IJCCE

View full text Add to dashboard Cite

Abstract:The risk problem of access control model is always the key point of security management. In this paper, we introduce the risk factor to control the risk of role under the proposed threshold when building RBAC policy based on role mining. At the same time, a user should meet some demands to activate roles. So we propose the following principal. A user could activate a role when his trust is higher than the trust threshold of the candidate role. This method makes role authority more reasonable and it avoids of the abuse of permissions. Experiments on performance indicate that the proposed algorithm can not only build the complete RBAC system to avoid roles' high risk caused by the high complexity of permissions in roles, but also meet the least privilege when a user activates a role.

show abstract

Section: Introductionmentioning

confidence: 99%

“…Ref. [4] and [5] divide the risk system may cause into four matrices. They are role similar matrices, compliance to policy matrix, trust matrix and abuse and misuse matrix.…”

Section: Introductionmentioning

confidence: 99%

The RBAC System Based on Role Risk and User Trust

Jin¹,

Shen²,

Yu³

2016

IJCCE

View full text Add to dashboard Cite

show abstract

A Survey of Role Mining

et al. 2016

View full text Add to dashboard Cite

Role-Based Access Control (RBAC) is the most widely used model for advanced access control deployed in diverse enterprises of all sizes. RBAC critically depends on defining roles, which are a functional intermediate between users and permissions. Thus, for RBAC to be effective, an appropriate set of roles needs to be identified. Since many organizations already have user-permission assignments defined in some form, it makes sense to identify roles from this existing information. This process, known as role mining, is one of the critical steps for successful RBAC adoption in any enterprise. In recent years, numerous role mining techniques have been developed, which take into account the characteristics of the core RBAC model, as well as its various extended features. In this article, we comprehensively study and classify the basic problem of role mining along with its several variants and the corresponding solution strategies. Categorization is done on the basis of the nature of the target RBAC system, the objective of role mining, and the type of solution. We then discuss the limitations of existing work and identify new areas of research that can lead to further enrichment of this field.

show abstract

A Survey on Access Control Mechanisms in E-commerce Environments

Vasiliadis

Georgiadis

2017

Proceedings of the 8th Balkan Conference in Informatics

View full text Add to dashboard Cite

A system for risk awareness during role mining

Cited by 4 publications

References 6 publications

The RBAC System Based on Role Risk and User Trust

The RBAC System Based on Role Risk and User Trust

A Survey of Role Mining

A Survey on Access Control Mechanisms in E-commerce Environments

Contact Info

Product

Resources

About