In Attribute-based Access Control (ABAC) systems, utilizing environment attributes along with the subject and object attributes introduces a dynamic nature to the access decisions. The inclusion of environment attributes helps in achieving a more fine-grained access control. In this paper, we present an ABAC policy mining algorithm that considers the environment attributes and their associated values while forming the rules. Furthermore, we use gini impurity to form the rules. This helps to minimize the number of rules in the generated policy. The experimental evaluation shows that our approach is quite effective in practice.
Das et al. REF present a solution to the problem of policy mining in ABAC that uses Gini impurity to form an ABAC policy.
Using Gini Impurity to Mine Attribute-based Access Control Policies with Environment Attributes
SACMAT '18
Medicine Computer Science