Show simple item record

AuthorHu, Jinwei
AuthorKhan, Khaled M.
AuthorBai, Yun
AuthorZhang, Yan
Available date2024-04-02T06:04:50Z
Publication Date2012
Publication NameASIACCS 2012 - 7th ACM Symposium on Information, Computer and Communications Security
AbstractRole engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results.
PublisherAssociation for Computing Machinery
SubjectAnswer set programming
Business requirement
Flexible framework
Role engineering
Role-based Access Control
Logic programming
Program translators
Security of data
TitleConstraint-enhanced role engineering via answer set programming
TypeConference Paper

Files in this item


There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record