Mining roles from web application usage patterns

Authors:
Nurit Gal-Oz;Yaron Gonen;Ran Yahalom;Ehud Gudes;Boris Rozenberg;Erez Shmueli
Affiliations:
Deutsche Telekom Laboratories and Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel;Deutsche Telekom Laboratories and Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel;Deutsche Telekom Laboratories and Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel;Deutsche Telekom Laboratories and Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel;Deutsche Telekom Laboratories and Department of Computer Science, Ben-Gurion University of the Negev, Beer-Sheva, Israel;Deutsche Telekom Laboratories and Department of Information Systems Engineering, Ben-Gurion University of the Negev, Beer Sheva, Israel
Venue:
TrustBus'11 Proceedings of the 8th international conference on Trust, privacy and security in digital business
Year:
2011

Citing 7
Cited 0

Role mining with ORCA

Proceedings of the tenth ACM symposium on Access control models and technologies
RoleMiner: mining roles using subset enumeration

Proceedings of the 13th ACM conference on Computer and communications security
The role mining problem: finding a minimal descriptive set of roles

Proceedings of the 12th ACM symposium on Access control models and technologies
Mining roles with semantic meanings

Proceedings of the 13th ACM symposium on Access control models and technologies
The role mining problem: A formal perspective

ACM Transactions on Information and System Security (TISSEC)
Mining roles with noisy data

Proceedings of the 15th ACM symposium on Access control models and technologies
Role mining in the presence of noise

DBSec'10 Proceedings of the 24th annual IFIP WG 11.3 working conference on Data and applications security and privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

Role mining refers to the problem of discovering an optimal set of roles from existing user permissions. In most role mining algorithms, the full set of user-permission assignments (UPA) is given as input. The challenge we are facing in the current paper is mining roles from actual web-application usage information. This information is collected by monitoring the access of users to application during a period of time. We analyze the actual permissions required to access the application in each user's session, and construct a set of user-permission assignments, which result in an incomplete UPA. We propose an algorithm that uses the session permission information to overcome the deficient data. We show by example how each step of the algorithm overcomes by heuristic instances of higher uncertainty. We demonstrate by simulation the efficiency of our algorithm in handling different levels of deficient data.