Abstract:Exfiltration of sensitive data and intellectual property theft have increased to a significant level affecting both government agencies as well as small to large businesses. One of the major reasons of data breaches is malicious insiders who have the access rights, knowledge of data values and technical know-how of escalating their privileges in launching such insider attacks. Traditional access control policies (to shared data and computing resources) were evolved around the trust on legitimate users’ access rights (read, write and execute) based on their jobs and role hierarchy in an organization. However, such access privileges are increasingly being misused by hostile, oblivious, rouge and pseudo-insiders. This work introduces a multi-user permission strategy and formulates a methodology for shared-trustworthy access (to classified data and services) by considering organizational structure. Accordingly, based on the sensitivity of the information being requested by a user, approvers are selected dynamically to reflect the work environment such as mobility, use of the device, access policy, etc. For this purpose, the proposed methodology first generates an access control graph, based on inter-relationship among employees and their roles in an organization. Next, it generates a set of permission grantees who are allowed to approve the access request of a user at a given time. The proposed multi-user permission strategy is evaluated with two empirical datasets and reported results demonstrated its ability in selecting non-repetitive approvers for a user access under different organizational and environmental constraints.

Severity Level of Permissions in Role-Based Access Control

User Authorization in a System with a Role-Based Access Control on the Basis of the Analytic Hierarchy Process

A Task-Role Based Access Control Model with Multi-Constraints

What Permissions Should This Android App Request?

The Equivalent Conversions of the Role-Based Access Control Model

Securing Role-Based Distributed Collaboration System

WARBAC: Improved Administrative Model of Role-Based Access Control

A Security Violation Detection Method For Rbac Based Interoperation

Role Permission in Hierarchy Relation of RBAC Model

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

The Privilege Control of the Users Role Hierarchies Based on RBAC

Separation of Duty Constraint for Permission Based Delegation Model

Preprocessing the Noise in Legacy User Permission Assignment Data for Role Mining - an Industrial Practice

Permission-Based Separation of Duty in Dynamic Role-Based Access Control Model.

Multilevel Multi-policy Access Control Model for Collaborative Application

Role Mining and Policy Misconfigurations

Inconsistency Management of Role Base Access Control Policy

A model for role administration using organization structure

Multi-user permission strategy to access sensitive information

Kind of user behaviour trust and role based dynamic access control model

Role-Based ABAC Model for Implementing Least Privileges