The Dynamic Role Mining Problem: Role Mining in Dynamically Changing Business Environments

To ensure the security of current information systems, role-based access control (RBAC) is a widely used concept. For this purpose, based on an initial assignment of permissions to users, permissions are grouped to roles, which are then assigned to users. The corresponding (NP-complete) optimization problem, the so-called role mining problem (RMP), aims at finding a minimal set of roles and a corresponding assignment of those roles to users. Previously, the RMP has been considered as a static optimization problem. However, the application of RBAC in real business use cases requires the inclusion of dynamically occurring events that reflect changes in the business environment of companies, as well as events that result from direct user interaction with the role mining process. Therefore, in this paper, we provide a comprehensive overview and classification of the most relevant events for role mining and present methods for integrating them into the framework of an evolutionary role mining algorithm. The functional performance of these methods as well as the overall performance gain of dynamic role mining compared to the static approach is then examined in a series of experiments.

show abstract

The Dynamic Role Mining Problem: Role Mining in Dynamically Changing Business Environments

Cited by 2 publications

References 0 publications

Evolutionary Algorithms for the Constrained Two-Level Role Mining Problem

Evolutionary Algorithms for the Constrained Two-Level Role Mining Problem

Dynamic Optimization of Role Concepts for Role-Based Access Control Using Evolutionary Algorithms

Contact Info

Product

Resources

About