Work

Using Gini Impurity to Mine Attribute-based Access Control Policies with Environment Attributes

Year: 2018

Type: conference-paper

Abstract: In Attribute-based Access Control (ABAC) systems, utilizing environment attributes along with the subject and object attributes introduces a dynamic nature to the access decisions. The inclusion of environment attributes helps in achieving a more fine-grained access control. In this paper, we present an ABAC policy mining algorithm that considers the environment attributes and their associated values while forming the rules. Furthermore, we use gini impurity to form the rules. This helps to minimize the number of rules in the generated policy. The experimental evaluation shows that our approach is quite effective in practice.

Source: ACM Symposium on Access Control Models and Technologies (SACMAT)

DOI: 10.1145/3205977.3208949

Authors: Saptarshi Das, Shamik Sural, Jaideep Vaidya, Vijayalakshmi Atluri

Institutions: Indian Institute of Technology Kharagpur, Rutgers, The State University of New Jersey

Language: English

Topic: Access Control and Trust

Subfield: Sociology and Political Science

Field: Social Sciences

Domain: Social Sciences

Open Access status: bronze

Funders: National Science Foundation, National Institutes of Health, National Institute of General Medical Sciences

Awards: Secure and PrivAte Collaborative EnvironmentS (SPACES) for biomedical analytics, I/UCRC: Center for Hybrid Multicore Productivity Research (CHMPR) - Rutgers Site