A probabilistic approach to hybrid role mining

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 101-111

  Frank, Mario ^a   Streich, Andreas P ^a   Basin, David ^a   Buhmann, Joachim M ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

Business meaning; Hybrid role mining; Machine learning; RBAC; Role mining

Indexed keywords

BUSINESS INFORMATION; BUSINESS MEANING; BUSINESS PERSPECTIVE; ENTERPRISE DATA; MINING ALGORITHMS; MINING MACHINES; MINING METHODS; PROBABILISTIC APPROACHES; PROBABILISTIC MODELS; ROLE-BASED ACCESS CONTROL; STATISTICAL MEASURES;

LEARNING SYSTEMS; MINING; NETWORK SECURITY; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 74049139498     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1653662.1653675     Document Type: Conference Paper

References (23)

1. R. Agrawal and R. Srikant. Fast algorithms for mining association rules. In J. B. Bocca, M. Jarke, and C. Zaniolo, editors, Proc. 20th Int. Conf. Very Large Data Bases, VLDB, pages 487-499. Morgan Kaufmann, 1994.
2. J. Buhmann and H. Kühnel. Vector quantization with complexity costs. In IEEE Trans on Information Theory, volume 39, pages 1133-1145, 1993.
3. rd ACM Symposium on Applied Computing, SAC '08, volume 3, pages 2129-2136, Fortaleza, Ceará, Brazil, 2008.
4. th ACM Symposium on Access Control Models and Technologies, SACMAT '09, 2009.
5. T. M. Cover and J. A. Thomas. Elements of Information Theory. Wiley-Interscience, 2006.
6. st ACM Workshop on Role-based access control, page 4, New York, NY, USA, 1996.
7. R. Crook, D. Ince, and B. Nuseibeh. Towards an analytical role modelling framework for security requirements. In Proc. of the 8th International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ'02), pages 9-10, 2002.
8. A. P. Dempster, N. M. Laird, and D. B. Rubin. Maximum likelihood from incomplete data via the EM algorithm. Journal of the Royal Statistical Society. Series B (Methodological), 39(1):1-38, 1977.
9. P. Epstein and R. Sandhu. Engineering of role/permission assignments. In ACSAC '01: Proceedings of the 17th Annual Computer Security Applications Conference, page 127, Washington, DC, USA, 2001. IEEE Computer Society.
10. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur., 4(3):224-274, 2001.
11. M. Frank, D. Basin, and J. M. Buhmann. A class of probabilistic models for role engineering. In CCS '08: Proceedings of the 15th ACM conference on Computer and communications security, pages 299-310, New York, NY, USA, 2008. ACM.
12. B. Ganter, G. Stumme, and R. Wille, editors. Formal Concept Analysis, Foundations and Applications, volume 3626 of Lecture Notes in Computer Science. Springer, 2005.
13. M. Kuhlmann, D. Shohat, and G. Schimpf. Role mining - revealing business roles for security administration using data mining technology. In SACMAT '03: Proceedings of the eighth ACM symposium on Access control models and technologies, pages 179-186, New York, NY, USA, 2003. ACM.
14. I. Molloy, H. Chen, T. Li, Q. Wang, N. Li, E. Bertino, S. Calo, and J. Lobo. Mining roles with semantic meanings. In SACMAT '08: Proceedings of the 13th ACM symposium on Access control models and technologies, pages 21-30, New York, NY, USA, 2008. ACM.
15. G. Neumann and M. Strembeck. A scenario-driven role engineering process for functional RBAC roles. In SACMAT '02: Proceedings of the seventh ACM symposium on Access control models and technologies, pages 33-42, New York, NY, USA, 2002. ACM.
16. Q. Ni, J. Lobo, S. Calo, P. Rohatgi, and E. Bertino. Automating role-based provisioning by learning from examples. In SACMAT '09: Proceedings of the 14th ACM symposium on Access control models and technologies, pages 75-84, New York, NY, USA, 2009. ACM.
17. H. Roeckle, G. Schimpf, and R. Weidinger. Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In RBAC '00: Proceedings of the fifth ACM workshop on Role-based access control, pages 103-110, New York, NY, USA, 2000. ACM.
18. K. Rose, E. Gurewitz, and G. Fox. Vector quantization by deterministic annealing. In IEEE Trans on Information Theory, volume 38, pages 2210-2239, 1992.
19. J. Schlegelmilch and U. Steffens. Role mining with ORCA. In SACMAT '05: Proceedings of the tenth ACM symposium on Access control models and technologies, pages 168-176, New York, NY, USA, 2005. ACM.
20. A. P. Streich, M. Frank, D. Basin, and J. M. Buhmann. Multi-assignment clustering for boolean data. In Proceedings of the 26th International Conference on Machine Learning, pages 969-976, Montreal, June 2009. Omnipress.
21. J. Vaidya, V. Atluri, and Q. Guo. The Role Mining Problem: Finding a minimal descriptive set of roles. In The Twelth ACM Symposium on Access Control Models and Technologies, pages 175-184, Sophia Antipolis, France, 2007. ACM.
22. J. Vaidya, V. Atluri, and J. Warner. Roleminer: Mining roles using subset enumeration. In CCS '06: Proceedings of the 13th ACM Conference on Computer and Communications Security, New York, NY, USA, 2006. ACM.
23. D. Zhang, K. Ramamohanarao, and T. Ebringer. Role engineering using graph optimisation. In SACMAT '07: Proceedings of the 12th ACM symposium on Access control models and technologies, pages 139-144, New York, NY, USA, 2007. ACM.