NDLI: Migrating to optimal RBAC with minimal perturbation

Please wait, while we are loading the content...

Fast exact and heuristic methods for role minimization problems

Delegation and satisfiability in workflow systems

Panel on role engineering

Authorization recycling in RBAC systems

RBAC administration in distributed systems

A general obligation model and continuity: enhanced policy enforcement engine for usage control

A meta model for access control: why is it needed and is it even possible to achieve?

Measuring integrity on mobile phone systems

Detecting and resolving policy misconfigurations in access-control systems

Migrating to optimal RBAC with minimal perturbation

Enforcing security properties in task-based systems

ROWLBAC: representing role based access control in OWL

Policy decomposition for collaborative access control

An obligation model bridging access control policies and privacy policies

Visualization based policy analysis: case study in SELinux

Enabling verification and conformance testing for access control model

Mining roles with semantic meanings

Task-based entailment constraints for basic workflow patterns

UAQ: a framework for user authorization query processing in RBAC extended with hybrid hierarchy and constraints

Context-aware role-based access control in pervasive computing systems

Access control by action control

Model-based behavioral attestation

Migrating to optimal RBAC with minimal perturbation

Content Provider	ACM Digital Library
Author	Vaidya, Jaideep Atluri, Vijayalakshmi Adam, Nabil Guo, Qi
Abstract	Devising a complete and correct set of roles has been recognized as one of the most important and challenging tasks in implementing role based access control. A key problem related to this is the notion of goodness - when is a set of roles good? Recently, the role mining problem (RMP) has been defined as the problem of discovering an optimal set of roles from existing user permissions. Several different objectives for optimality have been proposed. However, one problem with these definitions is that often organizations already have a deployed set of roles and wish to optimize this set. Even if an optimal set of roles is discovered, if this is widely different, it is impossible to simply throw out the deployed roles and start using the new ones as this may disrupt organizational processes and separation of duty constraints that are defined on roles. Essentially, what is missing is taking role migration cost into account when defining optimality, which would allow us to come up with the best suited set of roles. In this paper, we define a fundamentally different Role Mining Problem that takes the problem of deployed roles into account. We define the Minimal Perturbation RMP as the problem of discovering an optimal set of roles from existing user permissions that are similar to the currently deployed roles. In order to do this, we discuss the concept of similarity of roles and propose suitable definitions. Solutions also need to be parameterized to set relative weight of similarity and minimality to find the optimal set. We propose a heuristic solution based on the previously developed FastMiner algorithm that meets these requirements. We demonstrate the effectiveness of the algorithm through our experimental results.
Starting Page	11
Ending Page	20
Page Count	10
File Format	PDF
ISBN	9781605581293
DOI	10.1145/1377836.1377839
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2008-06-11
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Rbac Role engineering Role mining
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Migrating to optimal RBAC with minimal perturbation (2008)

An Approach for Hierarchical RBAC Reconfiguration With Minimal Perturbation

An efficient similarity-based approach for optimal mining of role hierarchy.

Migrating from RBAC to temporal RBAC

The role mining problem: finding a minimal descriptive set of roles

Mining roles with semantic meanings

A formal framework to elicit roles with business meaning in RBAC systems

StateMiner: an efficient similarity-based approach for optimal mining of role hierarchy

Evaluating role mining algorithms

Migrating to optimal RBAC with minimal perturbation

Similar Documents

Migrating to optimal RBAC with minimal perturbation (2008)

An Approach for Hierarchical RBAC Reconfiguration With Minimal Perturbation

An efficient similarity-based approach for optimal mining of role hierarchy.

Migrating from RBAC to temporal RBAC

The role mining problem: finding a minimal descriptive set of roles

Mining roles with semantic meanings

A formal framework to elicit roles with business meaning in RBAC systems

StateMiner: an efficient similarity-based approach for optimal mining of role hierarchy

Evaluating role mining algorithms

Migrating to optimal RBAC with minimal perturbation