Abstract:Role engineering is the process of defining a set of roles that offer administrative benefit for Role Based Access Control (RBAC), which ensures data privacy. It is a business critical task that is required by enterprises wishing to migrate to RBAC. However, existing methods of role generation have not analysed what constitutes a beneficial role and as a result, often produce inadequate solutions in a time consuming manner. To address the urgent issue of identifying high quality RBAC structures in real enterprise environments, we present a cost based analysis of the problem for both flat and hierarchical RBAC structures. Specifically we propose two cost models to evaluate the administration cost of roles and provide a k - partite graph approach to role engineering. Existing role cost evaulations are approximations that overestimate the benefit of a role. Our method and cost models can provide exact role cost and show when existing role cost evaluations can be used as a lower bound to improve efficiency without effecting quality of results. In the first work to address role engineering using large scale real data sets, we propose RoleAnnealing, a fast solution space search algorithm with incremental computation and guided search space heuristics. Our experimental results on both real and synthetic data sets demonstrate that high quality RBAC configurations that maintain data privacy are identified efficiently by RoleAnnealing. Comparison with an existing approach shows RoleAnnealing is significantly faster and produces RBAC configurations with lower cost.

Improving Scenario-Driven Role Engineering Process with Aspects

A Task-Role Based Access Control Model with Multi-Constraints

Role Engineering with SKAOS for Systems Employing RBAC

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

The Development Framework for Scenario-based Goal Modeling

Using Semantic Web Technologies to Specify Constraints of RBAC

Ontology-Based RBAC specification for interoperation in distributed environment

Graph Based Strategies to Role Engineering

Efficient Graph Based Approach To Large Scale Role Engineering

A cost-driven approach to role engineering

RBAC based access control model for services compositions cross multiple enterprises

Process Aspect: Handling Crosscutting Concerns during Software Process Improvement

A Viewpoint-Oriented Requirements Elicitation Integrated with Aspects

A Scenario-Based Approach for Requirements Management in Engineering Design

An ASP Based Approach of Inter-Domain Role Mapping

Rolevat: Visual Assessment of Practical Need for Role Based Access Control

The Efficient Maintenance of Access Roles with Role Hiding.

Towards a Group-Based RBAC Model and Decentralized User-Role Administration

A Problem-Driven Scenario-Based Collaborative Requirements Elicitation Method

Core role-based access control: efficient implementations by transformations.

An Aspect-Oriented Modeling Approach