A Survey of Role Mining
A Survey of Role Mining
复制标题
DOI：
10.1145/2871148
复制
发表时间：
2016-05-01
影响因子：
16.6
通讯作者：
Atluri, Vijayalakshmi
中科院分区：
文献类型：
--
作者：
Mitra, Barsha;Sural, Shamik;Atluri, Vijayalakshmi
基于角色的访问控制(RBAC)是部署在各种规模的不同企业中的最广泛使用的高级访问控制模型。RBAC在很大程度上依赖于定义角色，角色是用户和权限之间的中间功能。因此，为使RBAC有效，需要确定一组适当的角色。由于许多组织已经以某种形式定义了用户权限分配，因此从现有信息中识别角色是有意义的。这个过程称为角色挖掘，是在任何企业中成功采用RBAC的关键步骤之一。近年来，考虑到核心RBAC模型的特点以及它的各种扩展特性，已经发展了许多角色挖掘技术。本文对角色挖掘的基本问题及其几种变体和相应的解决策略进行了全面的研究和分类。根据目标RBAC系统的性质、角色挖掘的目标和解决方案的类型进行分类。然后，我们讨论现有工作的局限性，并确定可以进一步丰富这一领域的新的研究领域。
Role-Based Access Control (RBAC) is the most widely used model for advanced access control deployed in diverse enterprises of all sizes. RBAC critically depends on defining roles, which are a functional intermediate between users and permissions. Thus, for RBAC to be effective, an appropriate set of roles needs to be identified. Since many organizations already have user-permission assignments defined in some form, it makes sense to identify roles from this existing information. This process, known as role mining, is one of the critical steps for successful RBAC adoption in any enterprise. In recent years, numerous role mining techniques have been developed, which take into account the characteristics of the core RBAC model, as well as its various extended features. In this article, we comprehensively study and classify the basic problem of role mining along with its several variants and the corresponding solution strategies. Categorization is done on the basis of the nature of the target RBAC system, the objective of role mining, and the type of solution. We then discuss the limitations of existing work and identify new areas of research that can lead to further enrichment of this field.