Automating role-based provisioning by learning from examples

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2009, Pages 75-84

  Ni, Qun ^a   Lobo, Jorge ^b   Calo, Seraphin ^b   Rohatgi, Pankaj ^b   Bertino, Elisa ^a  

^a PURDUE UNIVERSITY   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Access control; Classification; Provisioning; Role

Indexed keywords

ADMINISTRATION COSTS; IDENTITY MANAGEMENT; LEARNING FROM EXAMPLES; LEARNING-BASED APPROACH; ROLE-BASED; SPECIFIC LEARNING; STANDARD COMPONENTS;

SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 70450284416     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1542207.1542222     Document Type: Conference Paper

References (18)

1. Beyond Roles: A Practical Approach to Enterprise User Provisioning. Technical report, Hitachi ID System, INC.
2. M. A. Al-Kahtani and R. S. Sandhu. Rule-based rbac with negative authorization. In ACSAC, pages 405-415. IEEE Computer Society, 2004.
3. M. R. Boutell, J. Luo, X. Shen, and C. M. Brown. Learning multi-label scene classification. Pattern Recognition, 37(9):1757-1771, 2004.
4. L. Breiman. Bagging predictors. Machine Learning, 24(2):123-140, 1996.
5. C.-C. Chang and C.-J. Lin. LIBSVM: a library for support vector machines. National Taiwan University, version 2.86 edition, April 2008.
6. A. Clare and R. D. King. Knowledge discovery in multi-label phenotype data. In L. D. Raedt and A. Siebes, editors, PKDD, volume 2168 of Lecture Notes in Computer Science, pages 42-53. Springer, 2001.
7. A. Ene, W. Horne, N. Milosavljevic, P. Rao, R. Schreiber, and R. E. Tarjan. Fast exact and heuristic methods for role minimization problems. In SACMAT 2008, pages 1-10.
8. R.-E. Fan and C.-J. Lin. A study on threshold selection for multi-label classification. Department of Computer Science, National Taiwan University, 2007.
9. M. Kuhlmann, D. Shohat, and G. Schimpf. Role mining - revealing business roles for security administration using data mining technology. In SACMAT 2003, pages 179-186.
10. I. Molloy, H. Chen, T. Li, Q. Wang, N. Li, E. Bertino, S. B. Calo, and J. Lobo. Mining roles with semantic meanings. In SACMAT 2008, pages 21-30.
11. E. Perkins and P. Carpenter. Magic Quadrant for User Provisioning, Aug 2008. Gartner RAS Core Research Note G00159740.
12. R Development Core Team. R: a language and environment for statistical computing. R Foundation for Statistical Computing, Vienna, Austria, 2005. ISBN 3-900051-07-0. Available at http://www.R-project.org.
13. S. Sheng and S. L. Osborn. A classifier-based approach to user-role assignment for web applications. In Secure Data Management, volume 3178 of LNCS, pages 163-171. Springer, 2004.
14. I. Tsochantaridis, T. Hofmann, T. Joachims, and Y. Altun. Support vector machine learning for interdependent and structured output spaces. In ICML 2004.
15. J. Vaidya, V. Atluri, Q. Guo, and N. R. Adam. Migrating to optimal rbac with minimal perturbation. In SACMAT 2008, pages 11-20.
16. H.-L. Wei and S. A. Billings. Feature subset selection and ranking for data dimensionality reduction. IEEE Trans. Pattern Anal. Mach. Intell., 29(1):162-166, 2007.
17. I. H. Witten and E. Frank. Data Mining: Practical Machine Learning Tools and Techniques. Morgan Kaufmann, San Francisco, second edition, June 2005. ISBN 0-12-088407-0.
18. R. J. Witty. Suntrust implements role-based provisioning to a successful conclusion. Technical Report G00132894, Gartner RAS Core Research, Jan 12 2006.