Experience-Based Access Management: A Life-Cycle Framework for Identity and Access Management Systems

  • Authors:
  • Carl Gunter;David Liebovitz;Bradley Malin

  • Affiliations:
  • University of Illinois at Urbana-Champaign;Northwestern University;Vanderbilt University

  • Venue:
  • IEEE Security and Privacy
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Experience-based access management (EBAM) is a life-cycle model for identity and access management. It incorporates models, techniques, and tools to reconcile differences between the ideal access model, as judged by professional and legal standards, and the enforced access control, specific to the operational system. EBAM's principal component is an expected-access model that represents differences between the ideal and enforced models on the basis of access logs and other operational information. A technique called access rules informed by probabilities (ARIP) can aid EBAM in the context of healthcare organizations.