# Enhancing Healthcare Security: A Unified RBAC and ABAC Risk-Aware Access Control Approach
## 5 Results and Analysis
### Experimental Results
Every operation, role, and risk-level combination generated a decision that contributed to the final TP, FP, FN, or TN tally, providing an accurate assessment of the PDP's policy enforcement effectiveness. The performance metrics were calculated based on the obtained values of TP, FP, FN, and TN derived from the policy decision evaluations, as shown in Table 9. The results demonstrate the robustness of the proposed integrated system with 88.37% accuracy, 90.90% precision, and 86.96% recall. These quantitative figures directly validate the overall viability and practicality of the proposed integrated system. The results demonstrate that the proposed model demonstrates a high level of accuracy, precision, and recall. The high accuracy demonstrates that the proposed model generally makes correct predictions about whether access should be granted or denied. The high value of the precision shows that the model is good at avoiding granting access when it should not. This is significant for security, as it helps prevent unauthorized access to sensitive information. The high value of the recall demonstrates that the model is good at identifying all scenarios where access should be granted. This is significant for usability, as it helps ensure that authorized users can access the resources they need. \begin{table}
\begin{tabular}{c c c c c c c} \hline \hline
**Scenario** & **User ID** & **Current** & **Current** & **Resource** & **Access** & **Confusion** \\
**No\#** & **User ID** & **Time** & **Location** & **Action** & **Sensitivity** & **Decision** & **Matrix** \\ \hline
32 & 18 & 15:00 & Reception 1 & Read & Restricted & Deny & TN \\ \hline
33 & 19 & 11:00 & Office 2 & Delete & Restricted & Permit & TP \\ \hline
34 & 19 & 11:00 & Office 1 & Delete & Restricted & Deny & FN \\ \hline
35 & 20 & 11:00 & Office 2 & Delete & Restricted & Deny & TN \\ \hline
36 & 20 & 11:00 & Reception 2 & Read & Restricted & Permit & TP \\ \hline
37 & 21 & 11:00 & Office 2 & Delete & Restricted & Deny & TN \\ \hline
38 & 22 & 10:00 & Reception 3 & Read & Internal & Permit & FP \\ \hline
39 & 23 & 10:00 & Reception 2 & Read & Confidential & Permit & TP \\ \hline
40 & 24 & 10:00 & Reception 2 & Read & Restricted & Deny & TN \\ \hline
41 & 25 & 10:00 & Reception 2 & Read & Internal & Permit & FP \\ \hline
42 & 26 & 10:00 & Reception 3 & Read & Internal & Permit & TP \\ \hline
43 & 27 & 10:00 & Reception 3 & Read & Internal & Deny & TN \\ \hline \hline \end{tabular}
\end{table} 
Table 8: _Cont._The high performance metrics demonstrate the effectiveness of the proposed integrated RBAC and ABAC risk-aware model. This approach combines the strengths of traditional access control models with risk-aware elements. The proposed model can accurately deny access to unauthorized users and minimize false positives, contributing to a more secure healthcare system. The proposed model also can dynamically adjust access control decisions based on user behavior and context providing greater flexibility and adaptability to evolving security needs. The model can also accurately identify all valid access requests to help ensure that authorized users can access the resources they need, improving system usability.