Abstract:For a given role-based access control (RBAC) configuration, user-role assignment satisfying least privilege principle (specified as LPUAP) is one of the most important problems to be solved in information security. LPUAP has been proved to be NP-hard. This paper gives several efficient greedy algorithms for handling this problem. Experiment results show that the output of our algorithms is almost optimal while the running time is greatly reduced. In another case where a RBAC configuration is to be set up, minimizing the descriptive set of roles (specified as Basic-RMP) and minimizing the administrative assignments for roles (specified as Edge-RMP) can greatly decrease the management costs. Both role mining problems (i.e., Basic-RMP and Edge-RMP) have also been proved to be NP-hard. This paper converts Basic-RMP to set cover problem and Edge-RMP to weighted set cover problem, and two algorithms respectively named \(GA_{Basic}\) algorithm for Basic-RMP and \(GA_{Edge}\) algorithm for Edge-RMP, are designed. Experiment results show that the average similarity rate between role sets produced by \(GA_{Basic}\) algorithm and the original ones used in generating the dataset is above 90 %. However, in the process of converting role mining into Set Cover Problem, the number of candidate role set is very large. In order to reduce the complexity of the \(GA_{Basic}\) algorithm, this paper presents a new polynomial-time algorithm with a performance nearly the same as that of \(GA_{Basic}\) algorithm.

Preprocessing the Noise in Legacy User Permission Assignment Data for Role Mining - an Industrial Practice

Role Mining and Policy Misconfigurations

Text Mining for U.S. Pension De-Risking Analysis

Practical Way to Implement Role-Based Access Control in Security Administration System

Mining Hierarchical Temporal Roles with Multiple Metrics

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Role Mining with Probabilistic Models

The research for spatial role-based access control model

Role Mining Algorithm Evaluation and Improvement in Large Volume Android Applications.

Inconsistency Management of Role Base Access Control Policy

Handling Least Privilege Problem and Role Mining in Rbac

A Role Engineering Approach Based on Spectral Clustering Analysis for Restful Permissions in Cloud

Role Engineering with SKAOS for Systems Employing RBAC

A cost-driven approach to role engineering

Relationships, Paths and Principal Matching: A New Approach to Access Control

Minimal Role Mining Method for Web Service Composition

Rolevat: Visual Assessment of Practical Need for Role Based Access Control

Constrained Role Mining

Workflow Mining Based On Role Modules

Bi-objective Optimization in Role Mining

ROLE-BASED ACCESS CONTROL MODEL FOR ADAPTIVE WORKFLOW SYSTEMS