On Feasibility of Attribute-Aware Relationship-Based Access Control Policy Mining
Résumé
This paper studies whether exact conversion to an AReBAC (Attribute-aware Relationship-Based Access Control) system is possible from an Enumerated Authorization System (EAS), given supporting attribute and relationship data. The Attribute-aware ReBAC Ruleset Existence Problem (ARREP) is defined formally and solved algorithmically, along with complexity analysis. Approaches to resolve infeasibility using exact solutions are discussed.
Origine | Fichiers produits par l'(les) auteur(s) |
---|