Work

Efficient and Extensible Policy Mining for Relationship-Based Access Control

Year: 2019

Type: conference-paper

Abstract: Relationship-based access control (ReBAC) is a flexible and expressive framework that allows policies to be expressed in terms of chains of relationship between entities as well as attributes of entities. ReBAC policy mining algorithms have a potential to significantly reduce the cost of migration from legacy access control systems to ReBAC, by partially automating the development of a ReBAC policy. Existing ReBAC policy mining algorithms support a policy language with a limited set of operators; this limits their applicability.

Source: ACM Symposium on Access Control Models and Technologies (SACMAT)

DOI: 10.1145/3322431.3325106

Authors: Thang Bui, Scott D. Stoller, Hieu Le

Institution: Stony Brook University

Language: English

Topic: Access Control and Trust

Subfield: Sociology and Political Science

Field: Social Sciences

Domain: Social Sciences

Open Access status: bronze

Funders: National Science Foundation, Defense Advanced Research Projects Agency, Office of Naval Research, Office of Naval Research Global