Paper Info
Title
An Approach to Bridge the Gap between Role Mining and Role Engineering via Migration Guides
Abstract
Mining approaches, such as role mining or organizational mining, can be applied to derive permissions and roles from a system's configuration or from log files. In this way, mining techniques document the current state of a system and produce current-state RBAC models. However, such current-state RBAC models most often follow from structures that have evolved over time and are not the result of a systematic rights management procedure. In contrast, role engineering is applied to define a tailored RBAC model for a particular organization or information system. Thus, role engineering techniques produce a target-state RBAC model that is customized for the business processes supported via the respective information system. The migration from a current-state RBAC model to a tailored target-state RBAC model is, however, a complex task. In this paper, we present a systematic approach to migrate current-state RBAC models to target-state RBAC models. In particular, we use model comparison techniques to identify differences between two RBAC models. Based on these differences, we derive migration rules that define which elements and element relations must be changed, added, or removed. A migration guide then includes all migration rules that need to be applied to a particular current-state RBAC model to produce the corresponding target-state RBAC model. In addition, we discuss different options for tool support and describe our implementation for the derivation of migration guides which is based on the Eclipse Modeling Framework (EMF).
Year
DOI
Venue
2012
10.1109/ARES.2012.77
Availability, Reliability and Security
Keywords
Field
DocType
corresponding target-state rbac model,current-state rbac model,role engineering,tailored target-state rbac model,tailored rbac model,migration rule,migration guide,role mining,particular current-state rbac model,target-state rbac model,model comparison technique,migration guides,rbac model,rbac,information systems,authorisation,data mining,migration
Information system,Role engineering,Data mining,Business process,Computer security,Computer science,Business data processing,Authorization,Role-based access control,Rights management,Eclipse
Conference
ISBN
Citations 
PageRank 
978-1-4673-2244-7
6
0.42
References 
Authors
23
2
Name
Order
Citations
PageRank
Anne Baumgrass111610.20
Mark Strembeck287457.86