NDLI: Graph based strategies to role engineering

Please wait, while we are loading the content...

Change the game or win the war: the metaphor matters

"Keynote CIO/CTO perspectives panel" with panelists

Cuckoo bags for exploring multikey data

Cyber security analysis using attack countermeasure trees

Neighborhood monitoring in ad hoc networks

Modeling stakeholder/value dependency through mean failure cost

Ontologies for modeling enterprise level security metrics

Decentralized information flow control on a bare-metal JVM

Using formal methods for security in the Xenon project

A learning-based approach for SELinux policy optimization with type mining

Software requirements for a system to compute mean failure cost

Gov 2.0 and collaborative security models: security platforms and architectures of participation are the foundations of a winning strategy

PUF ROKs: generating read-once keys from physically unclonable functions

Vulnerability categorization using Bayesian networks

Alerts visualization and clustering in network-based intrusion detection

Threat agents: a necessary component of threat analysis

Lies and the lying liars that tell them: a fair and balanced look at TLS

Building a trusted image for embedded systems

Discovery of C++ data structures from binaries

ReDS: reputation for directory services in P2P systems

Developing cyberspace data understanding: using CRISP-DM for host-based IDS feature mining

Coordinating and guiding federal, state and private sector cybersecurity initiatives

Towards safe and productive development of secure software: FADES and model-based software engineering

Concordia: a Google for malware

Towards a secure Frequency Monitoring NETwork (FNET) system

Orwell was an optimist

Overview of SLL's proposal in response to NIST's call for new global IdM/CKM designs without public keys

An organic model for detecting cyber-events

On generalization of performance of classifiers for steganalysis

Augmenting trust establishment in dynamic systems with social networks

The impact of predicting attacker tools in security risk assessments

Cyber physical systems R&D at DHS Science and Technology Directorate

Development of the PowerCyber SCADA security testbed

Towards an empirical measure for assessing public attitudes regarding government cybercrime countermeasures

Towards trustworthy shared networked sensor-actuator systems

High assurance smart grid

Evaluating confidence levels for security scenarios in attribute architectures

Next generation computing: the rise of the utility in a future that is cloudy with scattered security

Forensic implications of Ext4

Adding value to log event correlation using distributed techniques

Extracting security control requirements

Power, performance and security optimized hardware design for H.264

Safety and security in industrial control

Holistic cyber approach

Data diodes in support of trustworthy cyber infrastructure

A reference based analysis framework for analyzing system call traces

Fast malware classification by automated behavioral graph matching

Reasoning about policy noncompliance

Positing social and justice models for cyber security

Securing the perimeter: challenges in enforcing global access control

Software process control for secure program execution

Game theory for cyber security

A security ontology for incident analysis

Building ontology of cybersecurity operational information

How Google tests software

Graph based strategies to role engineering

The handicap principle, strategic information warfare and the paradox of asymmetry

NgViz: detecting DNS tunnels through n-gram visualization and quantitative analysis

Degrees of anonymity in today's computing environments: decomposing complex processes for anonymity analysis

A break down in trust, the emerging threat of cyber crime in connection with our dependence on web 2.0 technologies

A Java based component identification tool for measuring the strength of circuit protections

Computing the behavior of malware

Propagation modeling and analysis of network worm attack

Behavioral model for secure group communication in wireless mesh networks

Cyber science: moving from the toes to the shoulders of giants

SecureMyDroid: enforcing security in the mobile devices lifecycle

A data security protocol for the Trusted Truck® system

Plug & execute framework for network traffic generation

Protecting senior citizens from cyber security attacks in the e-health scenario: an international perspective

Cyberspace policy review and blueprint for research priorities

Multi-variant program execution for vulnerability detection and analysis

A service model for network security applications

A conceptual model of self-monitoring multi-core systems

20+years of cyber (in)security: what have we seen? what have we learned? what might we do?

Local binary patterns for face recognition under varying variations

Multistage attack detection system for network administrators using data mining

Managing Robustness of Distributed Applications Under Uncertainties: An Information Assurance Perspective

Risk mitigation strategies: lessons learned from actual insider attacks

The privacy implications of stateless IPv6 addressing

Mission assurance: challenges and opportunities

The need to consider both object identity and behavior in establishing the trustworthiness of network devices within a Smart Grid

CIO/CTO perspectives panel

Vulnerabilities leading to denial of services attacks in grid computing systems: a survey

CIO/CTO perspectives panel

Graph based strategies to role engineering

Content Provider	ACM Digital Library
Author	Zhang, Dana Ramamohanarao, Kotagiri Zhang, Rui Versteeg, Steven
Abstract	Role Engineering for Role Based Access Control (RBAC) has emerged as a challenging area of research, both in industry and academia. The problem originates from the practical need to create a set of roles that accurately reflects the internal functionalities of an enterprise. Existing approaches that have used data mining techniques for this problem often generate too many candidate roles and do not consider the effect of a given combination of roles on the overall configuration. Identification of an ideal RBAC solution is only possible with a clear and concise evaluation of the RBAC configuration goals. To address this issue, we discuss use of the graph model for the Role Engineering problem and show how effective this approach is in the search for a role engineering solution. We evaluate and formalise the problem of identifying the minimum number of descriptive roles for RBAC using a graph model and propose how its variations can be represented. Finally, we introduce novel strategies using the proposed models for future innovation and perform experimentation on both real and synthetically generated data.
Starting Page	1
Ending Page	4
Page Count	4
File Format	PDF
ISBN	9781450300179
DOI	10.1145/1852666.1852694
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2010-04-21
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Role engineering Role mining Graph modeling Role-based access control
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in