Permission and role automatic assigning of user in role-based access control

Han, Daojun; Zhuo, Hankui Hankz; Xia, Lan-ting; Li, Lei

doi:10.1007/s11771-012-1108-0

Cited by 7 publications

(5 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We observe that publications that propose an optimization algorithm typically assume fully automated optimization. Still, some optimization algorithms allow that the resulting change steps are delegated to humans in the form of recommendations, thus enabling them for semi-automated optimization (Han et al, 2012;Hu et al, 2010a;Rao et al, 2021;Mori, 2018, 2019). Publications that present an optimization tool aim to support humans in the semi-automated optimization of ACPs by definition.…”

Section: Considered Optimization Scenariosmentioning

confidence: 99%

“…Rule-based automation extends roles with rules which evaluate attributes to automatically update employee-role assignments (Al-Kahtani and Sandhu, 2002;Kern and Walhorn, 2005;Yi-qun et al, 2007;Han et al, 2012;Huang et al, 2012;Aftab et al, 2015), role-permission assignments (Han et al, 2012;Huang et al, 2012;Aftab et al, 2015;Parkinson et al, 2020) or role hierarchy assignments (Al-Kahtani and Sandhu, 2003). They can hence be interpreted ad hybrids of RBAC and ABAC.…”

Section: Increase Grade Of Automationmentioning

confidence: 99%

“…Their tool can recommend different migration paths to a human, who has to decide which (if any) of them might be suitable. Rao et al (2021), Han et al (2012) and Chakraborty and Ray (2006) propose RBAC extensions which generate recommendations for updating user-role assignments. While Rao et al (2021) and Han et al (2012).…”

Section: Recommendation-based Optimizationmentioning

confidence: 99%

“…Rao et al (2021), Han et al (2012) and Chakraborty and Ray (2006) propose RBAC extensions which generate recommendations for updating user-role assignments. While Rao et al (2021) and Han et al (2012). propose rule-based approaches, Chakraborty and Ray (2006) propose to recommend user-role-assignments on the basis of users' trustworthiness.…”

Section: Recommendation-based Optimizationmentioning

confidence: 99%

See 3 more Smart Citations

Optimization of Access Control Policies

Kern¹,

Baumer²,

Groll³

et al. 2022

Journal of Information Security and Applications

View full text Add to dashboard Cite

Section: Considered Optimization Scenariosmentioning

confidence: 99%

Section: Increase Grade Of Automationmentioning

confidence: 99%

Section: Recommendation-based Optimizationmentioning

confidence: 99%

Section: Recommendation-based Optimizationmentioning

confidence: 99%

See 2 more Smart Citations

Optimization of Access Control Policies

Kern¹,

Baumer²,

Groll³

et al. 2022

Journal of Information Security and Applications

View full text Add to dashboard Cite

“…It can be seen as one of the most advanced measures that solely relies on the components of an RBAC state. It is usable for both, individual roles and role sets, and thus allows for a good AnalyzingQualityCriteriainRole-basedIdentityandAccessManagement Attribute-based Approaches (Frank et al, 2009) (Han et al, 2012) Uses criteria: Yes No comparability of RBAC states. As a result of its popularity, several existing role mining approaches are able to consider the WSC.…”

Section: Quality-related Criteriamentioning

confidence: 99%

Analyzing Quality Criteria in Role-based Identity and Access Management

Kunz

Fuchs

Netter

et al. 2015

Proceedings of the 1st International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

Abstract:Roles have turned into the de facto standard for access control in enterprise identity management systems. However, as roles evolve over time, companies struggle to develop and maintain a consistent role model. Up to now, the core challenge of measuring the current quality of a role model and selecting criteria for its optimization remains unsolved. In this paper, we conduct a survey of existing role mining techniques and identify quality criteria inherently used by these approaches. This guides organizations during the selection of a role mining technique that matches their company-specific quality preferences. Moreover, our analysis aims to stimulate the research community to integrate quality metrics in future role mining approaches.

show abstract

How to Discover High-Quality Roles? A Survey and Dependency Analysis of Quality Criteria in Role Mining

Kunz

Fuchs²,

Netter³

et al. 2015

Communications in Computer and Information Science

View full text Add to dashboard Cite

Abstract.Roles have evolved into the de facto standard for access control in Enterprise Identity Management. However, companies struggle to develop and maintain a role-based access control state. For the initial role deployment, role mining is widely used. Due to the high number and complexity of available role mining algorithms, companies fail to perceive which is selected best according to their needs. Furthermore, requirements on the composition of roles such as reduction of administration cost are to be taken into account in role development. In order to give them guidance, in this paper we aggregate existing role mining approaches and classify them. For consideration of individual prerequisites we extract quality criteria that should be met. Later on, we discuss interdependencies between the criteria to help role developers avoid unwanted side-effects and produce RBAC states that are tailored to their preferences.

show abstract

Permission and role automatic assigning of user in role-based access control

Cited by 7 publications

References 27 publications

Optimization of Access Control Policies

Optimization of Access Control Policies

Analyzing Quality Criteria in Role-based Identity and Access Management

How to Discover High-Quality Roles? A Survey and Dependency Analysis of Quality Criteria in Role Mining

Contact Info

Product

Resources

About