On the definition of role mining

There have been many approaches proposed for role mining. However, the problems solved often differ due to a lack of consensus on the formal definition of the role mining problem. In this paper, we provide a detailed analysis of the requirements for role mining, the existing definitions of role mining, and the methods used to assess role mining results. Given basic assumptions on how access-control configurations are generated, we propose a novel definition of the role mining problem that fulfills the requirements that real-world enterprises typically have. In this way, we recast role mining as a prediction problem. Categories and Subject Descriptors K.6.5 [Management of Computing and Information Systems]: Security and Protection General Terms Security, Management Keywords RBAC, Role Engineering, Role Mining

• Type: Conference
• Year: 2010
• Where: SACMAT
• Authors: Mario Frank, Joachim M. Buhmann, David A. Basin
• Keywords: Control Systems, Role Engineering, Role Mining, Role Mining Problem, SACMAT 2010