On modeling system-centric information for role engineering

Shin, Dongwan; Ahn, Gail-Joon; Cho, Sangrae; Jin, Seunghun

doi:10.1145/775412.775434

Cited by 33 publications

(19 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Several subsequent papers [11,12,14] focused on the topdown approach. The top-down approach is generally very expensive as it is human-intensive and requires the collaboration of security experts and domain experts to extract the knowledge of business process descriptions.…”

Section: Related Workmentioning

confidence: 99%

Evaluating role mining algorithms

Molloy

et al. 2009

Proceedings of the 14th ACM Symposium on Access Control Models and Technologies

102

View full text Add to dashboard Cite

While many role mining algorithms have been proposed in recent years, there lacks a comprehensive study to compare these algorithms. These role mining algorithms have been evaluated when they were proposed, but the evaluations were using different datasets and evaluation criteria. In this paper, we introduce a comprehensive framework for evaluating role mining algorithms. We categorize role mining algorithms into two classes based on their outputs; Class 1 algorithms output a sequence of prioritized roles while Class 2 algorithms output complete RBAC states. We then develop techniques that enable us to compare these algorithms directly. We also introduce a new role mining algorithm and two new ways for algorithmically generating datasets for evaluation. Using synthetic as well as real datasets, we compared nine role mining algorithms. Our results illustrate the strengths and weaknesses of these algorithms.

show abstract

Section: Related Workmentioning

confidence: 99%

Evaluating role mining algorithms

Molloy

et al. 2009

Proceedings of the 14th ACM Symposium on Access Control Models and Technologies

102

View full text Add to dashboard Cite

show abstract

“…Role development can be carried out hybrid or non-hybrid. Several publications explicitly mention that a hybrid combination of Role Engineering and Role Mining is necessary to define a good collection of roles ( [7], [8], [9], [10], [11], and [12]). However, although considered to be the most promising way for developing roles on a company-wide level, no such hybrid RDM has been published up to now.…”

Section: Existing Role Development Methodologiesmentioning

confidence: 99%

HyDRo – Hybrid Development of Roles

Fuchs

Pernul

2008

Information Systems Security

View full text Add to dashboard Cite

Abstract. Defining valid enterprise-wide roles needs to be carried out on the basis of a predefined Role Development Methodology. Hybrid role development combining elements from Role Engineering and Role Mining is the most promising way to define enterprise-wide roles, however no such model has been published yet. We close this gap by analysing existing approaches and proposing HyDRo, a tool-supported methodology that facilitates existing identity information and access rights without neglecting the importance of information like managers' knowledge about their employees.

show abstract

“…In the top-down approach, the roles are defined from business perspective. Several research works [5], [6] , [7] have focused on the topdown approach. However, according to the NIST report, this approach is costly and time-consuming process [8].…”

Section: Related Workmentioning

confidence: 99%

Attribute-Based Mining Process for the Organization-Based Access Control Model

Wazan

Blanc

Debar

et al. 2013

2013 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications

View full text Add to dashboard Cite

Abstract-Since the late 60's, different security access control models have been proposed. Their rationale is to conceive high level abstract concepts that permit to manage the security policies of organizations efficiently. However, enforcing these models is not a straightforward task, especially when they do not consider the reality of organizations which may have ad-hoc security policies already deployed. Another issue is the vagueness of their abstract concepts. We propose to bridge the gap between the theory of access control models and the reality of organizations by defining an attribute-based mining process that deduce the abstract concepts starting from the attribute level. Additionaly, the attributes allow us to semantically enrich the obtained results. We have selected the Organization-Based Access Control (OrBAC) model as the abstraction objective of our study.

show abstract

On modeling system-centric information for role engineering

Cited by 33 publications

References 19 publications

Evaluating role mining algorithms

Evaluating role mining algorithms

HyDRo – Hybrid Development of Roles

Attribute-Based Mining Process for the Organization-Based Access Control Model

Contact Info

Product

Resources

About