Abstract:With rapid advances in computing systems, there is an increasing demand for more effective and efficient access control (AC) approaches. Recently, Attribute Based Access Control (ABAC) approaches have been shown to be promising in fulfilling the AC needs of such emerging complex computing environments. An ABAC model grants access to a requester based on attributes of entities in a system and an authorization policy; however, its generality and flexibility come with a higher cost. Further, increasing complexities of organizational systems and the need for federated accesses to their resources make the task of AC enforcement and management much more challenging. In this paper, we propose an adaptive ABAC policy learning approach to automate the authorization management task. We model ABAC policy learning as a reinforcement learning problem. In particular, we propose a contextual bandit system, in which an authorization engine adapts an ABAC model through a feedback control loop; it relies on interacting with users/administrators of the system to receive their feedback that assists the model in making authorization decisions. We propose four methods for initializing the learning model and a planning approach based on attribute value hierarchy to accelerate the learning process. We focus on developing an adaptive ABAC policy learning model for a home IoT environment as a running example. We evaluate our proposed approach over real and synthetic data. We consider both complete and sparse datasets in our evaluations. Our experimental results show that the proposed approach achieves performance that is comparable to ones based on supervised learning in many scenarios and even outperforms them in several situations.

Reachability Analysis for Attributes in ABAC with Group Hierarchy

WARBAC: Improved Administrative Model of Role-Based Access Control

FABAC: A Flexible Fuzzy Attribute-Based Access Control Mechanism.

Realization Distributed Access Control Based on Ontology and Attribute with OWL

An efficient privacy‐enhanced attribute‐based access control mechanism

A Privacy-Preserving Attribute-Based Access Control Scheme.

Learning Attribute-Based and Relationship-Based Access Control Policies with Unknown Values

Resource and Attribute Based Access Control Model for System with Huge Amounts of Resources.

Managing RBAC states with transitive relations.

A Feasible Fuzzy-Extended Attribute-Based Access Control Technique

A Model for Attribute Based Role-Role Assignment (ARRA)

Mining Attribute-based Access Control Policies

Graph Model Implementation of Attribute-Based Access Control Policies

Enhancing Attribute-Based Encryption with Attribute Hierarchy

Optimal Employee Recruitment in Organizations under Attribute-Based Access Control

A Scalable Permission Management System With Support of Conditional and Customized Attributes

Adaptive ABAC Policy Learning: A Reinforcement Learning Approach

Access control in a distributed micro-cloud environment

Security Analysis for a Ciphertext-Policy Attribute-Based Encryption Scheme

The Efficient Maintenance of Access Roles with Role Hiding.

ABAC policy mining method based on hierarchical clustering and relationship extraction