Mining Likely Properties of Access Control Policies via Association Rule Mining

Abstract. Access control mechanisms are used to control which principals (such as users or processes) have access to which resources based on access control policies. To ensure the correctness of access control policies, policy authors conduct policy verification to check whether certain properties are satisfied by a policy. However, these properties are often not written in practice. To facilitate property verification, we present an approach that automatically mines likely properties from a policy via the technique of association rule mining. In our approach, mined likely properties may not be true for all the policy behaviors but are true for most of the policy behaviors. The policy behaviors that do not satisfy likely properties could be faulty. Therefore, our approach then conducts likelyproperty verification to produce counterexamples, which are used to help policy authors identify faulty rules in the policy. To show the effectiveness of our approach, we conduct evaluation on fou...

• Type: Conference
• Year: 2010
• Where: DBSEC
• Authors: JeeHyun Hwang, Tao Xie, Vincent C. Hu, Mine Altunay
• Keywords: Database, DBSEC 2010, Likely Properties, Policy, Policy Behaviors