Role mining - Revealing business roles for security administration using data mining technology

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2003, Pages 179-186

  Kuhlmann, Martin ^a   Shohat, Dalia ^a   Schimpf, Gerhard ^b  

^a SYSTOR Security Solutions GmbH   (Germany)

^b SMF TEAM IT Security Consulting   (Germany)

Author keywords

Data mining; Enterprise systems management; Identity management; Migration; Provisioning; Role engineering; Role based access control; Security administration; Security data models; Security management; Single point of administration and control

Indexed keywords

ADMINISTRATIVE DATA PROCESSING; DATA ACQUISITION; DATA STRUCTURES; DATABASE SYSTEMS; INFORMATION TECHNOLOGY; SECURITY OF DATA; SEMANTICS;

CROSS PLATFORM ADMINISTRATION TOOL; ROLE BASED ACCESS CONTROL; ROLE BASED SECURITY ADMINISTRATION;

DATA MINING;

EID: 0242625194     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/775433.775435     Document Type: Conference Paper

References (22)

1. G. Schimpf, "Security Administration and Control of Corporate-Wide Diverse Systems," in ACM SIGSAC Review, vol. 15(1), 1997.
2. "Security Administration Manager (SAM), Release 2.4. Concepts and Facilities," Systor GmbH & Co. KG, Köln, Germany (1999).
3. B. J. Biddle and E. J. Thomas, "Role Theory: Concepts and Research". New York: Robert E. Krieger Publishing Company, 1979.
4. D. F. Ferraiolo and R. D. Kuhn, "Role-Based Access Controls," presented at 15th NIST-NCSC National Computer Security Conference, Baltimore, MD, USA, 1992.
5. R. Awischus, "Role-Based Access Control with the Security Administration Manager (SAM)", presented at 2nd ACM Workshop on Role-Based Access Control, Fairfax, Virginia, USA, 1997.
6. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman, "Role-based Access Control Models", IEEE Computer, vol. 29(2), 1996.
7. R. S. Sandhu, V. Bhamidipati, and Q. Munawer, "The ARBAC97 model for role-based administration of roles", ACM Transactions on Information and System Security, Vol. 1 (No. 2 Feb.), 1999.
8. A. Mökeberg and R. Rakete, "Three for One: Role-based Access Control in Rapidly Changing Heterogeneous Environments", presented at 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
9. H. Röckle, G. Schimpf, and R. Weidinger, "Process-Oriented Approach for Role-Finding to Implement Role-Based Security Administration in a Large Industrial Organization", presented at 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
10. R. S. Sandhu, "Engineering Authority and Trust in Cyberspace: The OM-AM and RBAC Way", presented at 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
11. R. S. Sandhu, D. F. Ferraiolo, and R. D. Kuhn, "The NIST Model for Role-Based Access Control: Towards A Unified Standard", presented at 5th ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000.
12. E. J. Coyne, "Role-Engineering", presented at 1st ACM Workshop on Role-Based Access Control, Gaithersburg, MD, USA, 1995.
13. E. B. Fernandez and J. C. Hawkins, "Determining Role Rights from Use Cases", presented at 2nd Workshop on Role-Based Access Control, Fairfax, VA, USA, 1997.
14. A. Kern and M. Kuhlmann, A. Schaad and J. Moffett, "Observations on the Role Life-Cycle in the Context of Enterprise Security Management", presented at SACMAT 2002, Monterey, CA, USA.
15. D.F. Ferraiolo, "An Argument for Role-Based Access Control", presented at SACMAT 2001, Chantilly, VA, USA.
16. P.A. Epstein, "Engineering of Role/Permission Assignments" - doctoral dissertation 2002, GMU Fairfax, VA, USA.
17. T. Jaeger, "On the Increasing Importance of Constraints", presented at 4th ACM Workshop on Role-Based Access Control, Fairfax, VA, USA, 1999.
18. M. Nyanchama and S. Osborn, "The Role Graph Model and Conflict of Interest", ACM Transactions on Information and System Security, Vol. 2 (No. 1, Febr), 1999.
19. J. Grabmeyer and A. Rudolph, "Techniques of Cluster Algorithms in Data Mining", IBM Informationssysteme GmbH, December 10, 1998.
20. A. Kern, "Advanced Features for Enterprise-Wide Role-based Access Control", 18th Annual Computer Security Applications Conference, Las Vegas, NV, December 2002.
21. IBM Intelligent Miner for Data, User Manual.
22. H. Röckle and G. Schimpf, "Rollen-Engineering im IT-Berechtigungsmanagement" KES Zeitschrift für Kommunikations- und EDV Sicherheit 5/00, 2000.