Constraint-enhanced role engineering via answer set programming
المؤلف | Hu, Jinwei |
المؤلف | Khan, Khaled M. |
المؤلف | Bai, Yun |
المؤلف | Zhang, Yan |
تاريخ الإتاحة | 2024-04-02T06:04:50Z |
تاريخ النشر | 2012 |
اسم المنشور | ASIACCS 2012 - 7th ACM Symposium on Information, Computer and Communications Security |
المصدر | Scopus |
الملخص | Role engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results. |
اللغة | en |
الناشر | Association for Computing Machinery |
الموضوع | Answer set programming Business requirement Flexible framework Role engineering Role-based Access Control Logic programming Program translators Security of data |
النوع | Conference Paper |
الصفحات | 73-74 |
الملفات في هذه التسجيلة
الملفات | الحجم | الصيغة | العرض |
---|---|---|---|
لا توجد ملفات لها صلة بهذه التسجيلة. |
هذه التسجيلة تظهر في المجموعات التالية
-
علوم وهندسة الحاسب [2284 items ]