Abstract:Role engineering is the process of defining a set of roles that offer administrative benefit for Role Based Access Control (RBAC), which ensures data privacy. It is a business critical task that is required by enterprises wishing to migrate to RBAC. However, existing methods of role generation have not analysed what constitutes a beneficial role and as a result, often produce inadequate solutions in a time consuming manner. To address the urgent issue of identifying high quality RBAC structures in real enterprise environments, we present a cost based analysis of the problem for both flat and hierarchical RBAC structures. Specifically we propose two cost models to evaluate the administration cost of roles and provide a k - partite graph approach to role engineering. Existing role cost evaulations are approximations that overestimate the benefit of a role. Our method and cost models can provide exact role cost and show when existing role cost evaluations can be used as a lower bound to improve efficiency without effecting quality of results. In the first work to address role engineering using large scale real data sets, we propose RoleAnnealing, a fast solution space search algorithm with incremental computation and guided search space heuristics. Our experimental results on both real and synthetic data sets demonstrate that high quality RBAC configurations that maintain data privacy are identified efficiently by RoleAnnealing. Comparison with an existing approach shows RoleAnnealing is significantly faster and produces RBAC configurations with lower cost.

A cost-driven approach to role engineering

Efficient Graph Based Approach To Large Scale Role Engineering

A Role-Based Modeling Approaches To Mas Development With Proto-Framework

Graph Based Strategies to Role Engineering

Constrained Role Mining

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Rolevat: Visual Assessment of Practical Need for Role Based Access Control

Role Mining and Policy Misconfigurations

Mining Hierarchical Temporal Roles with Multiple Metrics

Role Engineering with SKAOS for Systems Employing RBAC

Role Mining with Probabilistic Models

RBAC based access control model for services compositions cross multiple enterprises

Minimal Role Mining Method for Web Service Composition

A model for role administration using organization structure

The Efficient Maintenance of Access Roles with Role Hiding.

Core role-based access control: efficient implementations by transformations.

Research and implementation of role-based RBAC administration model

The Equivalent Conversions of the Role-Based Access Control Model

A Decentralized Rbac Model And Its User-Role Administration

Towards a Group-Based RBAC Model and Decentralized User-Role Administration