Sciweavers

Share
SACMAT
2009
ACM

A formal framework to elicit roles with business meaning in RBAC systems

9 years 6 months ago
A formal framework to elicit roles with business meaning in RBAC systems
The role-based access control (RBAC) model has proven to be cost effective to reduce the complexity and costs of access permission management. To maximize the advantages offered by RBAC, the role engineering discipline has been introduced. A viable approach is to explore current applications and systems to find de facto roles embedded in existing user permissions, leading to what is usually referred to as role mining. However, a key problem that has not yet been adequately addressed by existing role mining approaches is how to propose roles that have business meaning. In order to do this, we provide a new formal framework that also enjoys practical relevance. In particular, the proposed framework leverages business information—such as business processes and organization structure—to implement role mining algorithms. Our key observation is that a role is likely to be meaningful from a business perspective when it involves activities within the same business process or organizati...
Alessandro Colantonio, Roberto Di Pietro, Alberto
Added 23 Jul 2010
Updated 23 Jul 2010
Type Conference
Year 2009
Where SACMAT
Authors Alessandro Colantonio, Roberto Di Pietro, Alberto Ocello, Nino Vincenzo Verde
Comments (0)
books