Migrating to optimal RBAC with minimal perturbation

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2008, Pages 11-20

  Vaidya, Jaideep ^a   Atluri, Vijayalakshmi ^a   Adam, Nabil ^a   Guo, Qi ^a  

^a Rutgers University

Author keywords

RBAC; Role engineering; Role mining

Indexed keywords

CHALLENGING TASKS; HEURISTIC SOLUTIONS; KEY PROBLEMS; MIGRATION COSTS; MINIMALITY; OPTIMAL SETS; OPTIMALITY; ORGANIZATIONAL PROCESSES; PARAMETERIZED; RBAC; RELATIVE WEIGHTS; ROLE ENGINEERING; ROLE MINING; ROLE MININGS; ROLE-BASED ACCESS CONTROLS; SEPARATION OF DUTIES;

CONTROL SYSTEMS; HEURISTIC ALGORITHMS; MODELS; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 57349117050     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1377836.1377839     Document Type: Conference Paper

References (19)

1. K. Brooks. Migrating to role-based access control. In ACM Workshop on Role-Based Access Control, pages 71-81, 1999.
2. E.J.Coyne. Role-engineering. In 1st ACM Workshop on Role-Based Access Control, 1995.
3. P. Epstein and R. Sandhu. Engineering of role/permission assignment. In 17th Annual Computer Security Application Conference, December 2001.
4. E. B. Fernandez and J. C. Hawkins. Determining role rights from use cases. In ACM Workshop on Role-Based Access Control, pages 121-125, 1997.
5. D. Ferraiolo, R. Sandhu, S. Gavrila, D. Kuhn, and R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. TISSEC, 2001.
6. M. P. Gallagher, A. O'Connor, and B. Kropp. The economic impact of role-based access control. Planning report 02-1, National Institute of Standards and Technology, March 2002.
7. A. Kern, M. Kuhlmann, A. Schaad, and J. Moffett. Observations on the role life-cycle in the context of enterprise security management. In 7th ACM Symposium on Access Control Models and Technologies, June 2002.
8. M. Kuhlmann, D. Shohat, and G. Schimpf. Role mining - revealing business roles for security administration using data mining technology. In Symposium on Access Control Models and Technologies (SACMAT). ACM, June 2003.
9. H. Lu, J. Vaidya, and V. Atluri. Optimal boolean matrix decomposition: Application to role engineering. In IEEE International Conference on Data Engineering, to appear, April 2008.
10. G. Neumann and M. Strembeck. A scenario-driven role engineering process for functional rbac roles. In 7th ACM Symposium on Access Control Models and Technologies, June 2002.
11. H. Roeckle, G. Schimpf, and R. Weidinger. Process-oriented approach for role-finding to implement role-based security administraiton in a large industrial organization. In ACM. editor. RBAC, 2000.
12. R. S. Sandliu et al. Role-based Access Control Models. IEEE Computer, pages 38-47, February 1996.
13. A. Schaad, J. Moffett, and J. Jacob. The role-based access control system of a european bank: A case study and discussion. In Proceedings of ACM Symposium on Access Control Models and Technologies, pages 3-9, May 2001.
14. J. Schlegelmilch and U. Steffens. Role mining with orca. In Symposium on Access Control Models and Technologies (SACMAT). ACM, June 2005.
15. B. Shafiq, J. B. Joshi, E. Bertino, and A. Ghafoor. Secure interoperation in a multidomain environment employing rbac policies. IEEE Transactions on Knowledge and Data Engineering, 17(11): 1557-1577, 2005.
16. D. Shin, G.-J. Ahn, S. Cho, and S. Jin. On modeling system-centric information for roleengineering. In 8th ACM Symposium on Access Control Models and Technologies, June 2003.
17. D. Thomsen, D. O'Brien, and J. Bogle. Role based access control framework for network enterprises. In 14th Annual Computer Security Application Conference, pages 50-58, December 1998.
18. J. Vaidya, V. Atluri, and Q. Guo. The role mining problem: Finding a minimal descriptive set of roles. In The Twelth ACM Symposium, on Access Control Models and Technologies, pages 175-184, Sophia Antipolis, France, June20-22 2007.
19. J. Vaidya, V. Atluri, and J. Warner. Roleminer: mining roles using subset enumeration. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 144-153, 2006.