Constraint-enhanced role engineering via answer set programming

Jinwei Hu; Khaled M. Khan; Yun Bai; Yan Zhang

doi:10.1145/2414456.2414499

Constraint-enhanced role engineering via answer set programming

Jinwei Hu, Khaled M. Khan, Yun Bai, Yan Zhang

Research output: Chapter in Book / Conference Paper › Conference Paper › peer-review

10 Citations (Scopus)

Abstract

Role engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results.

Original language	English
Title of host publication	ASIACCS'12: Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security, May 2-4, 2012, Seoul, Korea
Publisher	ACM Publishing
Number of pages	12
ISBN (Print)	9781450313032
DOIs	https://doi.org/10.1145/2414456.2414499
Publication status	Published - 2012
Event	ACM Symposium on Information_Computer and Communications Security - Duration: 2 May 2012 → …

Conference

Conference	ACM Symposium on Information_Computer and Communications Security
Period	2/05/12 → …

Keywords

answer set programming
logic programming
role engineering
role-based access control

Access to Document

10.1145/2414456.2414499

Cite this

@inproceedings{130e93a048ef4acf87495b5030c04426,

title = "Constraint-enhanced role engineering via answer set programming",

abstract = "Role engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results.",

keywords = "answer set programming, logic programming, role engineering, role-based access control",

author = "Jinwei Hu and Khan, {Khaled M.} and Yun Bai and Yan Zhang",

year = "2012",

doi = "10.1145/2414456.2414499",

language = "English",

isbn = "9781450313032",

booktitle = "ASIACCS'12: Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security, May 2-4, 2012, Seoul, Korea",

publisher = "ACM Publishing",

note = "ACM Symposium on Information_Computer and Communications Security ; Conference date: 02-05-2012",

}

Hu, J, Khan, KM, Bai, Y & Zhang, Y 2012, Constraint-enhanced role engineering via answer set programming. in ASIACCS'12: Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security, May 2-4, 2012, Seoul, Korea. ACM Publishing, ACM Symposium on Information_Computer and Communications Security, 2/05/12. https://doi.org/10.1145/2414456.2414499

TY - GEN

T1 - Constraint-enhanced role engineering via answer set programming

AU - Hu, Jinwei

AU - Khan, Khaled M.

AU - Bai, Yun

AU - Zhang, Yan

PY - 2012

Y1 - 2012

N2 - Role engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results.

AB - Role engineering (RE) aims to develop and maintain appropriate role-based access control (RBAC) configurations. However, RE with constraints in place is not well-studied. Constraints usually describe organizations' security and business requirements. An inconsistency between configurations and constraints compromises security and availability, as it may authorize otherwise forbidden access and deprive users of due privileges. In this paper, we apply answer set programming (ASP) to discover RBAC configurations that comply with constraints and meet various optimization objectives. We first formulate the need of supporting constraints as a problem independent of and complementary to existing RE problems. We then present a flexible framework for translating the proposed problem to ASP programs. In this way, the problem can be addressed via ASP solvers. Finally, we demonstrate the effectiveness and efficiency of our approach through experimental results.

KW - answer set programming

KW - logic programming

KW - role engineering

KW - role-based access control

UR - http://handle.uws.edu.au:8081/1959.7/521489

UR - http://dl.acm.org/citation.cfm?id=2414456&CFID=868069050&CFTOKEN=34776867

U2 - 10.1145/2414456.2414499

DO - 10.1145/2414456.2414499

M3 - Conference Paper

SN - 9781450313032

BT - ASIACCS'12: Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security, May 2-4, 2012, Seoul, Korea

PB - ACM Publishing

T2 - ACM Symposium on Information_Computer and Communications Security

Y2 - 2 May 2012

ER -

Constraint-enhanced role engineering via answer set programming

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this