A framework for risk assessment in access control systems
Risk-Aware Role-Based Access Control