Role mining - revealing business roles for security administration using data mining technology

Authors:
Martin Kuhlmann;Dalia Shohat;Gerhard Schimpf
Affiliations:
SYSTOR Security Solutions GmbH, Hermann-Heinrich-Gossen-Strasse 3, Cologne;SYSTOR Security Solutions GmbH, Hermann-Heinrich-Gossen-Strasse 3, Cologne;SMF TEAM IT-Security Consulting, Am Waldweg 23, Pforzheim
Venue:
Proceedings of the eighth ACM symposium on Access control models and technologies
Year:
2003

Citing 16
Cited 48

Role-Based Access Control Models

Computer
Security management for administration and control of corporate-wide, diverse systems

ACM SIGSAC Review
Role based access control with the security administration manager (SAM)

RBAC '97 Proceedings of the second ACM workshop on Role-based access control
Determining role rights from use cases

RBAC '97 Proceedings of the second ACM workshop on Role-based access control
Role engineering

RBAC '95 Proceedings of the first ACM Workshop on Role-based access control
The role graph model and conflict of interest

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
The ARBAC97 model for role-based administration of roles

ACM Transactions on Information and System Security (TISSEC) - Special issue on role-based access control
On the increasing importance of constraints

RBAC '99 Proceedings of the fourth ACM workshop on Role-based access control
The NIST model for role-based access control: towards a unified standard

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Three for one: role-based access-control management in rapidly changing heterogeneous environments

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
Engineering authority and trust in cyberspace: the OM-AM and RBAC way

RBAC '00 Proceedings of the fifth ACM workshop on Role-based access control
An argument for the role-based access control model

SACMAT '01 Proceedings of the sixth ACM symposium on Access control models and technologies
Observations on the role life-cycle in the context of enterprise security management

SACMAT '02 Proceedings of the seventh ACM symposium on Access control models and technologies
Advanced Features for Enterprise-Wide Role-Based Access Control

ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
Engineering of role/permission assignments

Engineering of role/permission assignments

Modular authorization and administration

ACM Transactions on Information and System Security (TISSEC)
Rule support for role-based access control

Proceedings of the tenth ACM symposium on Access control models and technologies
Role mining with ORCA

Proceedings of the tenth ACM symposium on Access control models and technologies
RoleMiner: mining roles using subset enumeration

Proceedings of the 13th ACM conference on Computer and communications security
Role engineering using graph optimisation

Proceedings of the 12th ACM symposium on Access control models and technologies
The role mining problem: finding a minimal descriptive set of roles

Proceedings of the 12th ACM symposium on Access control models and technologies
A cost-driven approach to role engineering

Proceedings of the 2008 ACM symposium on Applied computing
Fast exact and heuristic methods for role minimization problems

Proceedings of the 13th ACM symposium on Access control models and technologies
Migrating to optimal RBAC with minimal perturbation

Proceedings of the 13th ACM symposium on Access control models and technologies
Mining roles with semantic meanings

Proceedings of the 13th ACM symposium on Access control models and technologies
Panel on role engineering

Proceedings of the 13th ACM symposium on Access control models and technologies
Detecting and resolving policy misconfigurations in access-control systems

Proceedings of the 13th ACM symposium on Access control models and technologies
A class of probabilistic models for role engineering

Proceedings of the 15th ACM conference on Computer and communications security
HyDRo --- Hybrid Development of Roles

ICISS '08 Proceedings of the 4th International Conference on Information Systems Security
Automating role-based provisioning by learning from examples

Proceedings of the 14th ACM symposium on Access control models and technologies
A formal framework to elicit roles with business meaning in RBAC systems

Proceedings of the 14th ACM symposium on Access control models and technologies
Evaluating role mining algorithms

Proceedings of the 14th ACM symposium on Access control models and technologies
Working set-based access control for network file systems

Proceedings of the 14th ACM symposium on Access control models and technologies
Edge-RMP: Minimizing administrative assignments for role-based access control

Journal of Computer Security
Multi-assignment clustering for Boolean data

ICML '09 Proceedings of the 26th Annual International Conference on Machine Learning
Using user context for accessing IT resources

Proceedings of the first international workshop on Context-aware software technology and applications
A probabilistic approach to hybrid role mining

Proceedings of the 16th ACM conference on Computer and communications security
Dynamic security policy learning

Proceedings of the first ACM workshop on Information security governance
The role mining problem: A formal perspective

ACM Transactions on Information and System Security (TISSEC)
On the definition of role mining

Proceedings of the 15th ACM symposium on Access control models and technologies
StateMiner: an efficient similarity-based approach for optimal mining of role hierarchy

Proceedings of the 15th ACM symposium on Access control models and technologies
Mining Roles with Multiple Objectives

ACM Transactions on Information and System Security (TISSEC)
Incorporating social-cultural contexts in role engineering: an activity theoretic approach

International Journal of Business Information Systems
Automating security configuration and administration: an access control perspective

IWSEC'10 Proceedings of the 5th international conference on Advances in information and computer security
A new role mining framework to elicit business roles and to mitigate enterprise risk

Decision Support Systems
Mining RBAC roles under cardinality constraint

ICISS'10 Proceedings of the 6th international conference on Information systems security
Detection of anomalous insiders in collaborative environments via relational analysis of access logs

Proceedings of the first ACM conference on Data and application security and privacy
Detecting and resolving policy misconfigurations in access-control systems

ACM Transactions on Information and System Security (TISSEC)
Adversaries' Holy Grail: access control analytics

Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security
Process compliance analysis based on behavioural profiles

Information Systems
Deriving role engineering artifacts from business processes and scenario models

Proceedings of the 16th ACM symposium on Access control models and technologies
An optimization model for the extended role mining problem

DBSec'11 Proceedings of the 25th annual IFIP WG 11.3 conference on Data and applications security and privacy
The minimum transfer cost principle for model-order selection

ECML PKDD'11 Proceedings of the 2011 European conference on Machine learning and knowledge discovery in databases - Volume Part I
Discovering access-control misconfigurations: new approaches and evaluation methodologies

Proceedings of the second ACM conference on Data and Application Security and Privacy
Role engineering: from theory to practice

Proceedings of the second ACM conference on Data and Application Security and Privacy
Multi-assignment clustering for boolean data

The Journal of Machine Learning Research
Generative models for access control policies: applications to role mining over logs with attribution

Proceedings of the 17th ACM symposium on Access Control Models and Technologies
Mining the role-oriented process models based on genetic algorithm

ICSI'12 Proceedings of the Third international conference on Advances in Swarm Intelligence - Volume Part I
Role Mining with Probabilistic Models

ACM Transactions on Information and System Security (TISSEC)
Role mining algorithm evaluation and improvement in large volume android applications

Proceedings of the first international workshop on Security in embedded systems and smartphones
Towards user-oriented RBAC model

DBSec'13 Proceedings of the 27th international conference on Data and Applications Security and Privacy XXVII
Information behaving badly

Proceedings of the 2013 workshop on New security paradigms workshop
An optimization framework for role mining

Journal of Computer Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we describe the work devising a new technique for role-finding to implement Role-Based Security Administration. Our results stem from industrial projects, where large-scale customers wanted to migrate to Role-Based Access Control (RBAC) based on already existing access rights patterns in their production IT-systems.