An Optimization Model for the Extended Role Mining Problem - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2011

An Optimization Model for the Extended Role Mining Problem

Emre Uzun
  • Fonction : Auteur
  • PersonId : 986163
Vijayalakshmi Atluri
  • Fonction : Auteur
  • PersonId : 986166
Haibing Lu
  • Fonction : Auteur
  • PersonId : 1016209
Jaideep Vaidya
  • Fonction : Auteur
  • PersonId : 986164

Résumé

The primary purpose of Role Mining is to effectively determine the roles in an enterprise using the permissions that have already been assigned to the users. If this permission assignment is viewed as a 0-1 matrix, then Role Mining aims to decompose this matrix into two matrices which represent user-role and role-permission assignments. This decomposition is known as Boolean Matrix Decomposition (BMD). In this paper, we use an Extended BMD (EBMD) to consider separation of duty constraints (SOD) and exceptions, that are common to any security system, in the role mining process. Essentially, in EBMD, we introduce negative assignments. An additional benefit of allowing negative assignments in roles is that, a less number of roles can be used to reconstruct the same given user-permission assignments. We introduce Extended Role Mining Problem and its variants and present their optimization models. We also propose a heuristic algorithm that is capable of utilizing these models to find good decompositions.
Fichier principal
Vignette du fichier
978-3-642-22348-8_8_Chapter.pdf (158.13 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01586595 , version 1 (13-09-2017)

Licence

Identifiants

Citer

Emre Uzun, Vijayalakshmi Atluri, Haibing Lu, Jaideep Vaidya. An Optimization Model for the Extended Role Mining Problem. 23th Data and Applications Security (DBSec), Jul 2011, Richmond, VA, United States. pp.76-89, ⟨10.1007/978-3-642-22348-8_8⟩. ⟨hal-01586595⟩
54 Consultations
76 Téléchargements

Altmetric

Partager

More