Attribute Based Access Control (ABAC) is fast replacing traditional access control models due to its dynamic nature, flexibility and scalability. ABAC is often used in collaborative environments. However, a major hurdle to deploying ABAC is to precisely configure the ABAC policy. In this paper, we present an ABAC mining approach that can automatically discover the appropriate ABAC policy rules. We first show that the ABAC mining problem is equivalent to identifying a set of functional dependencies in relational databases that cover all of the records in a table. We also propose a more efficient algorithm, called ABAC-SRM which discovers the most general policy rules from a set of candidate rules. We experimentally show that ABAC-SRM is accurate and significantly more efficient than the existing state of the art.
Talukdar et al. REF show that the problem of policy mining in ABAC is similar to that of identifying functional dependencies in database tables.
Efficient Bottom-Up Mining of Attribute Based Access Control Policies
2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC)
2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC)
Medicine Computer Science