The role hierarchy mining problem: Discovery of optimal role hierarchies

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2008, Pages 237-246

  Guo, Qi ^a   Vaidya, Jaideep ^a   Atluri, Vijayalakshmi ^a  

^a RUTGERS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

GRAPH REPRESENTATIONS; HEURISTIC SOLUTIONS; MINING PROBLEMS; OPTIMALITY; ROLE HIERARCHIES; ROLE-BASED ACCESS CONTROL MODELS; SECURITY ADMINISTRATIONS; TRANSITIVE CLOSURES;

ACCESS CONTROL; OPTIMIZATION; SECURITY SYSTEMS;

COMPUTER APPLICATIONS;

EID: 60649115442     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2008.38     Document Type: Conference Paper

References (17)

1. A. Aho, M. Garey, and J. Ullman. The transitive reduction of a directed graph. SIAM Journal on Computing.
2. B. Zhang, E. Al-Shaer, R. Jagadeesan, J. Riely, and C. Pitcher. Specifications of a high-level conflict-free firewall policy language for multi-domain networks. In The Twelth ACM Symposium on Access Control Models and Technologies, pages 185-194, 2007.
3. E.J. Coyne. Role-engineering. In 1st ACM Workshop on Role-Based Access Control, 1995.
4. A. Ene, W. Horne, N. Milosavljevic, P. Rao, R. Schreiber, and R. Tarjan. Fast exact and heuristic methods for role minimization problems. In The ACM Symposium on Access Control Models and Technologies, June 2008.
5. D. Ferraiolo, R. Sandhu, S. Gavrila, D. Kuhn, and R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. TISSEC, 2001.
6. M. P. Gallagher, A. O'Connor, and B. Kropp. The economic impact of role-based access control. Planning report 02-1, National Institute of Standards and Technology, March 2002.
7. F. Geerts, B. Goethals, and T. Mielikainen. Tiling databases. In Discovery Science, Lecture Notes in Computer Science, pages 278 - 289. Springer-Verlag, 2004.
8. A. Kern, M. Kuhlmann, A. Schaad, and J. Moffett. Observations on the role life-cycle in the context of enterprise security management. In 7th ACM Symposium on Access Control Models and Technologies, June 2002.
9. M. Kuhlmann, D. Shohat, and G. Schimpf. Role mining - revealing business roles for security administration using data mining technology. In Symposium on Access Control Models and Technologies (SACMAT). ACM, June 2003.
10. I. Molloy, H. Chen, T. Li, Q. Wang, N. Li, E. Bertino, S. Calo, and J. Lobo. Mining roles with semantic meanings. In SACMAT '08: Proceedings of the 13th ACM symposium on Access control models and technologies, pages 21-30, New York, NY, USA, 2008. ACM.
11. R. S. Sandhu et al. Role-based Access Control Models. IEEE Computer, pages 38-47, February 1996.
12. J. Schlegelmilch and U. Steffens. Role mining with orca. In The Tenth ACM Symposium on Access Control Models and Technologies, pages 168-176, June 2005.
13. J. Vaidya, V. Atluri, and Q. Guo. The role mining problem: Finding a minimal descriptive set of roles. In The Twelth ACM Symposium on Access Control Models and Technologies, pages 175-184, Sophia Antipolis, France, June 20-22 2007.
14. J. Vaidya, V. Atluri, and Q. Guo. The role mining problem: A formal perspective. ACM Transactions on Information Systems Security, to appear.
15. J. Vaidya, V. Atluri, Q. Guo, and N. Adam. Migrating to optimal rbac with minimal perturbation. In The ACM Symposium on Access Control Models and Technologies, June 2008.
16. J. Vaidya, V. Atluri, Q. Guo, and H. Lu. Edge-rmp: Minimizing administrative assignments for role-based access control. Journal of Computer Security, to appear.
17. J. Vaidya, V. Atluri, and J. Warner. Roleminer: mining roles using subset enumeration. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 144-153, 2006.