{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T07:17:50Z","timestamp":1782371870624,"version":"3.54.5"},"publisher-location":"Cham","reference-count":91,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030048334","type":"print"},{"value":"9783030048341","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-030-04834-1_2","type":"book-chapter","created":{"date-parts":[[2018,11,29]],"date-time":"2018-11-29T07:46:31Z","timestamp":1543477591000},"page":"24-54","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":26,"title":["Policy Engineering in RBAC and ABAC"],"prefix":"10.1007","author":[{"given":"Saptarshi","family":"Das","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Barsha","family":"Mitra","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vijayalakshmi","family":"Atluri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaideep","family":"Vaidya","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shamik","family":"Sural","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,11,30]]},"reference":[{"key":"2_CR1","unstructured":"Agrawal, R., Srikant, R.: Fast algorithms for mining association rules in large databases. In: Proceedings of 20th International Conference on Very Large Data Bases (VLDB), pp. 487\u2013499, September 1994"},{"key":"2_CR2","unstructured":"Moses, T., et al.: Extensible access control markup language (XACML) version 2.0. Oasis Standard (2005)"},{"issue":"3","key":"2_CR3","doi-asserted-by":"crossref","first-page":"261","DOI":"10.3233\/HSN-2006-290","volume":"15","author":"B Aziz","year":"2006","unstructured":"Aziz, B., Foley, S.N., Herbert, J., Swart, G.: Reconfiguring role based access control policies using risk semantics. J. High Speed Netw. 15(3), 261\u2013273 (2006)","journal-title":"J. High Speed Netw."},{"key":"2_CR4","doi-asserted-by":"crossref","unstructured":"Baumgrass, A., Strembeck, M., Rinderle-Ma, S.: Deriving role engineering artifacts from business processes and scenario models. In: Proceedings of 16th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 11\u201320, June 2011","DOI":"10.1145\/1998441.1998445"},{"issue":"3","key":"2_CR5","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1145\/501978.501979","volume":"4","author":"E Bertino","year":"2001","unstructured":"Bertino, E., Bonatti, P.A., Ferrari, E.: TRBAC: a temporal role-based access control model. ACM Trans. Inf. Syst. Secur. (TISSEC) 4(3), 191\u2013233 (2001)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"Biswas, P., Sandhu, R., Krishnan, R.: Label-based access control: an ABAC model with enumerated authorization policy. In: Conference on Data and Applications Security and Privacy, pp. 1\u201312 (2016)","DOI":"10.1007\/978-3-319-41483-6_9"},{"key":"2_CR7","doi-asserted-by":"crossref","unstructured":"Blundo, C., Cimato, S.: A simple role mining algorithm. In: Proceedings of 25th ACM Symposium on Applied Computing (SAC), pp. 1958\u20131962, March 2010","DOI":"10.1145\/1774088.1774503"},{"key":"2_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"289","DOI":"10.1007\/978-3-642-38004-4_19","volume-title":"Security and Trust Management","author":"C Blundo","year":"2013","unstructured":"Blundo, C., Cimato, S.: Constrained role mining. In: J\u00f8sang, A., Samarati, P., Petrocchi, M. (eds.) STM 2012. LNCS, vol. 7783, pp. 289\u2013304. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-38004-4_19"},{"key":"2_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"140","DOI":"10.1007\/978-3-642-29963-6_11","volume-title":"Security and Trust Management","author":"L Chen","year":"2012","unstructured":"Chen, L., Crampton, J.: Risk-aware role-based access control. In: Meadows, C., Fernandez-Gago, C. (eds.) STM 2011. LNCS, vol. 7170, pp. 140\u2013156. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-29963-6_11"},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Cobena, G., Abiteboul, S., Marian, A.: Detecting changes in xml documents. In: International Conference on Data Engineering (IDCE), pp. 41\u201352 (2002)","DOI":"10.1109\/ICDE.2002.994696"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Colantonio, A., Pietro, R.D., Ocello, A.: A cost-driven approach to role engineering. In: Proceedings of 23rd ACM Symposium on Applied Computing (SAC), pp. 2129\u20132136, March 2008","DOI":"10.1145\/1363686.1364198"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Colantonio, A., Pietro, R.D., Ocello, A., Verde, N.V.: A formal framework to elicit roles with business meaning in RBAC systems. In: Proceedings of 14th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 85\u201394, June 2009","DOI":"10.1145\/1542207.1542223"},{"key":"2_CR13","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/978-3-642-01244-0_23","volume-title":"Emerging Challenges for Security, Privacy and Trust","author":"A Colantonio","year":"2009","unstructured":"Colantonio, A., Di Pietro, R., Ocello, A., Verde, N.V.: Mining stable roles in RBAC. In: Gritzalis, D., Lopez, J. (eds.) SEC 2009. IAICT, vol. 297, pp. 259\u2013269. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-01244-0_23"},{"key":"2_CR14","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/978-3-642-15257-3_3","volume-title":"Security and Privacy \u2013 Silver Linings in the Cloud","author":"A Colantonio","year":"2010","unstructured":"Colantonio, A., Di Pietro, R., Ocello, A., Verde, N.V.: Mining business-relevant RBAC states through decomposition. In: Rannenberg, K., Varadharajan, V., Weber, C. (eds.) SEC 2010. IAICT, vol. 330, pp. 19\u201330. Springer, Heidelberg (2010). https:\/\/doi.org\/10.1007\/978-3-642-15257-3_3"},{"issue":"5","key":"2_CR15","doi-asserted-by":"publisher","first-page":"548","DOI":"10.1016\/j.cose.2010.01.001","volume":"29","author":"A Colantonio","year":"2010","unstructured":"Colantonio, A., Pietro, R.D., Ocello, A., Verde, N.V.: Taming role mining complexity in RBAC. Comput. Secur. 29(5), 548\u2013564 (2010). Special Issue on Challenges for Security and Privacy and Trust","journal-title":"Comput. Secur."},{"issue":"4","key":"2_CR16","doi-asserted-by":"publisher","first-page":"715","DOI":"10.1016\/j.dss.2010.08.022","volume":"50","author":"A Colantonio","year":"2011","unstructured":"Colantonio, A., Pietro, R.D., Ocello, A., Verde, N.V.: A new role mining framework to elicit business roles and to mitigate enterprise risk. Decis. Support Syst. (DSS) 50(4), 715\u2013731 (2011)","journal-title":"Decis. Support Syst. (DSS)"},{"issue":"7","key":"2_CR17","doi-asserted-by":"publisher","first-page":"844","DOI":"10.1016\/j.cose.2012.01.005","volume":"31","author":"A Colantonio","year":"2012","unstructured":"Colantonio, A., Pietro, R.D., Verde, N.V.: A business-driven decomposition methodology for role mining. Comput. Secur. (COSE) 31(7), 844\u2013855 (2012)","journal-title":"Comput. Secur. (COSE)"},{"key":"2_CR18","doi-asserted-by":"crossref","unstructured":"Coyne, E.J.: Role engineering. In: Proceedings of 1st ACM Workshop on Role-Based Access Control (RBAC), pp. 15\u201316, November 1995","DOI":"10.1145\/270152.270159"},{"key":"2_CR19","unstructured":"Crook, R., Ince, D., Nuseibeh, B.: Towards an analytical role modelling framework for security requirements. In: Proceedings of 8th International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ), pp. 9\u201310, September 2002"},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Elliott, A., Knight, S.: Start here: engineering scalable access control systems. In: Proceedings of 21st ACM on Symposium on Access Control Models and Technologies (SACMAT), pp. 113\u2013124, June 2016","DOI":"10.1145\/2914642.2914651"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"Ene, A., Horne, W., Milosavljevic, N., Rao, P., Schreiber, R., Tarjan, R.E.: Fast exact and heuristic methods for role minimization problems. In: Proceedings of 13th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 1\u201310, June 2008","DOI":"10.1145\/1377836.1377838"},{"key":"2_CR22","doi-asserted-by":"crossref","unstructured":"Epstein, P., Sandhu, R.: Towards a UML based approach to role engineering. In: Proceedings of 4th ACM Workshop on Role-Based Access Control, pp. 135\u2013143, October 1999","DOI":"10.1145\/319171.319184"},{"key":"2_CR23","doi-asserted-by":"crossref","unstructured":"Fernandez, E.B., Hawkins, J.C.: Determining role rights from use cases. In: Proceedings of 2nd ACM Workshop on Role-based Access Control (RBAC), pp. 121\u2013125, November 1997","DOI":"10.1145\/266741.266767"},{"issue":"3","key":"2_CR24","doi-asserted-by":"publisher","first-page":"224","DOI":"10.1145\/501978.501980","volume":"4","author":"DF Ferraiolo","year":"2001","unstructured":"Ferraiolo, D.F., Sandhu, R.S., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur. (TISSEC) 4(3), 224\u2013274 (2001)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"issue":"4","key":"2_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2445566.2445567","volume":"15","author":"M Frank","year":"2013","unstructured":"Frank, M., Buhmann, J.M., Basin, D.: Role mining with probabilistic models. ACM Trans. Inf. Syst. Secur. (TISSEC) 15(4), 1\u201328 (2013)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"Frank, M., Streich, A.P., Basin, D., Buhmann, J.M.: A probabilistic approach to hybrid role mining. In: Proceedings of 16th ACM Conference on Computer and Communications Security (CCS), pp. 101\u2013111, November 2009","DOI":"10.1145\/1653662.1653675"},{"key":"2_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"287","DOI":"10.1007\/978-3-540-89862-7_24","volume-title":"Information Systems Security","author":"L Fuchs","year":"2008","unstructured":"Fuchs, L., Pernul, G.: HyDRo \u2013 hybrid development of roles. In: Sekar, R., Pujari, A.K. (eds.) ICISS 2008. LNCS, vol. 5352, pp. 287\u2013302. Springer, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-540-89862-7_24"},{"key":"2_CR28","doi-asserted-by":"crossref","unstructured":"Gautam, M., Jha, S., Sural, S., Vaidya, J., Atluri, V.: Constrained policy mining in attribute based access control. In: ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 121\u2013123 (2017)","DOI":"10.1145\/3078861.3084163"},{"key":"2_CR29","doi-asserted-by":"crossref","unstructured":"Guo, Q., Vaidya, J., Atluri, V.: The role hierarchy mining problem: discovery of optimal role hierarchies. In: Proceedings of 24th Annual Computer Security Applications Conference (ACSAC), pp. 237\u2013246, December 2008","DOI":"10.1109\/ACSAC.2008.38"},{"issue":"2","key":"2_CR30","first-page":"14","volume":"26","author":"R Hamming","year":"1950","unstructured":"Hamming, R.: Error detecting and error correcting codes. Bell Syst. Tech. J. 26(2), 14\u2013160 (1950)","journal-title":"Bell Syst. Tech. J."},{"issue":"1","key":"2_CR31","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1109\/TDSC.2014.2309117","volume":"12","author":"P Harika","year":"2015","unstructured":"Harika, P., Nagajyothi, M., John, J.C., Sural, S., Vaidya, J., Atluri, V.: Meeting cardinality constraints in role mining. IEEE Trans. Dependable Secur. Comput. (TDSC) 12(1), 71\u201384 (2015)","journal-title":"IEEE Trans. Dependable Secur. Comput. (TDSC)"},{"key":"2_CR32","doi-asserted-by":"crossref","unstructured":"Hingankar, M., Sural, S.: Towards role mining with restricted user-role assignment. In: Proceedings of 2nd International Conference on Wireless Communication, Vehicular Technology, Information Theory and Aerospace Electronic Systems Technology (Wireless VITAE), pp. 1\u20135, February 2011","DOI":"10.1109\/WIRELESSVITAE.2011.5940855"},{"key":"2_CR33","doi-asserted-by":"crossref","unstructured":"Hu, J., Khan, K.M., Bai, Y., Zhang, Y.: Constraint-enhanced role engineering via answer set programming. In: Proceedings of 7th ACM Symposium on Information, Computer and Communications Security (ASIACCS), pp. 73\u201374, May 2012","DOI":"10.1145\/2414456.2414499"},{"key":"2_CR34","unstructured":"Hu, V.C., et al.: Guide to Attribute-Based Access Control (ABAC) definition and considerations. Technical report, NIST Special Publication 800-162, January 2014. http:\/\/nvlpubs.nist.gov\/nistpubs\/-specialpublications\/NIST.sp.800-162.pdf"},{"key":"2_CR35","doi-asserted-by":"crossref","unstructured":"Hu, V.C., et al.: Guide to attribute based access control (ABAC) definition and considerations. National Institute of Standards and Technology Special Publication (2014)","DOI":"10.6028\/NIST.SP.800-162"},{"issue":"2","key":"2_CR36","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1109\/MC.2015.33","volume":"48","author":"VC Hu","year":"2015","unstructured":"Hu, V.C., Kuhn, D.R., Ferraiolo, D.F.: Attribute-based access control. Computer (IEEE) 48(2), 85\u201388 (2015)","journal-title":"Computer (IEEE)"},{"key":"2_CR37","doi-asserted-by":"crossref","unstructured":"Huang, C., Sun, J., Wang, X., Si, Y., Wu, D.: Preprocessing the noise in legacy user permission assignment data for role mining - an industrial practice. In: Proceedings of 25th IEEE International Conference on Software Maintenance (ICSM), pp. 403\u2013406, September 2009","DOI":"10.1109\/ICSM.2009.5306288"},{"issue":"1","key":"2_CR38","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1007\/s10878-013-9633-9","volume":"30","author":"H Huang","year":"2015","unstructured":"Huang, H., Shang, F., Liu, J., Du, H.: Handling least privilege problem and role mining in RBAC. J. Comb. Optim. 30(1), 63\u201386 (2015)","journal-title":"J. Comb. Optim."},{"key":"2_CR39","doi-asserted-by":"crossref","unstructured":"Huang, H., Shang, F., Zhang, J.: Approximation algorithms for minimizing the number of roles and administrative assignments in RBAC. In: Proceedings of 36th Annual IEEE Computer Software and Applications Conference Workshops (COMPSAC), pp. 427\u2013432, July 2012","DOI":"10.1109\/COMPSACW.2012.81"},{"key":"2_CR40","doi-asserted-by":"crossref","unstructured":"Jafarian, J.H., Takabi, H., Touati, H., Hesamifard, E., Shehab, M.: Towards a general framework for optimal role mining: a constraint satisfaction approach. In: Proceedings of 20th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 211\u2013220, June 2015","DOI":"10.1145\/2752952.2752975"},{"key":"2_CR41","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-642-31540-4_4","volume-title":"Data and Applications Security and Privacy XXVI","author":"X Jin","year":"2012","unstructured":"Jin, X., Krishnan, R., Sandhu, R.: A unified attribute-based access control model covering DAC, MAC and RBAC. In: Cuppens-Boulahia, N., Cuppens, F., Garcia-Alfaro, J. (eds.) DBSec 2012. LNCS, vol. 7371, pp. 41\u201355. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-31540-4_4"},{"key":"2_CR42","series-title":"IFIP Advances in Information and Communication Technology","doi-asserted-by":"publisher","first-page":"150","DOI":"10.1007\/978-3-642-30436-1_13","volume-title":"Information Security and Privacy Research","author":"JC John","year":"2012","unstructured":"John, J.C., Sural, S., Atluri, V., Vaidya, J.S.: Role mining under role-usage cardinality constraint. In: Gritzalis, D., Furnell, S., Theoharidou, M. (eds.) SEC 2012. IAICT, vol. 376, pp. 150\u2013161. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-30436-1_13"},{"key":"2_CR43","doi-asserted-by":"crossref","unstructured":"Kern, A., Kuhlmann, M., Schaad, A., Moffett, J.: Observations on the role life-cycle in the context of enterprise security management. In: Proceedings of 7th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 43\u201351, June 2002","DOI":"10.1145\/507711.507718"},{"key":"2_CR44","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1007\/978-3-319-03491-1_6","volume-title":"Trusted Systems","author":"L Krautsevich","year":"2013","unstructured":"Krautsevich, L., Lazouski, A., Martinelli, F., Yautsiukhin, A.: Towards policy engineering for attribute-based access control. In: Bloem, R., Lipp, P. (eds.) INTRUST 2013. LNCS, vol. 8292, pp. 85\u2013102. Springer, Cham (2013). https:\/\/doi.org\/10.1007\/978-3-319-03491-1_6"},{"key":"2_CR45","doi-asserted-by":"crossref","unstructured":"Kuhlmann, M., Shohat, D., Schimpf, G.: Role mining - revealing business roles for security administration using data mining technology. In: Proceedings of 8th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 179\u2013186, June 2003","DOI":"10.1145\/775412.775435"},{"key":"2_CR46","doi-asserted-by":"publisher","first-page":"171","DOI":"10.1007\/978-3-642-17714-9_13","volume-title":"Information Systems Security","author":"Ravi Kumar","year":"2010","unstructured":"Kumar, R., Sural, S., Gupta, A.: Mining RBAC roles under cardinality constraint. In: Proceedings of 6th International Conference on Information Systems Security (ICISS), pp. 171\u2013185, December 2010"},{"key":"2_CR47","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1007\/978-3-319-07076-6_6","volume-title":"Risk Assessment and Risk-Driven Testing","author":"L Krautsevich","year":"2014","unstructured":"Krautsevich, L., Lazouski, A., Martinelli, F., Yautsiukhin, A.: Towards attribute-based access control policy engineering using risk. In: Bauer, T., Gro\u00dfmann, J., Seehusen, F., St\u00f8len, K., Wendland, M.-F. (eds.) RISK 2013. LNCS, vol. 8418, pp. 80\u201390. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-07076-6_6"},{"key":"2_CR48","doi-asserted-by":"crossref","unstructured":"Lin, D., Rao, P., Bertino, E., Lobo, J.: An approach to evaluate policy similarity. In: ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 1\u201310 (2007)","DOI":"10.1145\/1266840.1266842"},{"key":"2_CR49","doi-asserted-by":"publisher","first-page":"1946","DOI":"10.1109\/TKDE.2012.174","volume":"25","author":"D Lin","year":"2013","unstructured":"Lin, D., Rao, P., Ferrini, P., Bertino, E., Lobo, J.: A similarity measure for comparing XACML policies. IEEE Trans. Knowl. Data Eng. 25, 1946\u20131959 (2013)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"2_CR50","first-page":"81","volume-title":"Lecture Notes in Computer Science","author":"Haibing Lu","year":"2013","unstructured":"Lu, H., Hong, Y., Yang, Y., Duan, L., Badar, N.: Towards user-oriented RBAC model. In: Proceedings of 27th International Conference on Data and Applications Security and Privacy (DBSec), pp. 81\u201396, July 2013"},{"issue":"1","key":"2_CR51","doi-asserted-by":"publisher","first-page":"107","DOI":"10.3233\/JCS-140519","volume":"23","author":"H Lu","year":"2015","unstructured":"Lu, H., Hong, Y., Yang, Y., Duan, L., Badar, N.: Towards user-oriented RBAC model. J. Comput. Secur. (JCS) 23(1), 107\u2013129 (2015)","journal-title":"J. Comput. Secur. (JCS)"},{"key":"2_CR52","doi-asserted-by":"crossref","unstructured":"Lu, H., Vaidya, J., Atluri, V.: Optimal Boolean matrix decomposition: application to role engineering. In: Proceedings of 24th IEEE International Conference on Data Engineering (ICDE), pp. 297\u2013306, April 2008","DOI":"10.1109\/ICDE.2008.4497438"},{"issue":"1","key":"2_CR53","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3233\/JCS-130484","volume":"22","author":"H Lu","year":"2014","unstructured":"Lu, H., Vaidya, J., Atluri, V.: An optimization framework for role mining. J. Comput. Secur. (JCS) 22(1), 1\u201331 (2014)","journal-title":"J. Comput. Secur. (JCS)"},{"key":"2_CR54","doi-asserted-by":"publisher","first-page":"461","DOI":"10.1145\/360303.360333","volume":"19","author":"MA Harrison","year":"1976","unstructured":"Harrison, M.A., Ruzzo, W.L., Ullman, J.D.: Protection in operating systems. Commun. ACM 19, 461\u2013471 (1976)","journal-title":"Commun. ACM"},{"key":"2_CR55","doi-asserted-by":"crossref","unstructured":"Ma, X., Li, R., Lu, Z.: Role mining based on weights. In: Proceedings of 15th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 65\u201374, June 2010","DOI":"10.1145\/1809842.1809854"},{"key":"2_CR56","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"335","DOI":"10.1007\/11871637_33","volume-title":"Knowledge Discovery in Databases: PKDD 2006","author":"P Miettinen","year":"2006","unstructured":"Miettinen, P., Mielik\u00e4inen, T., Gionis, A., Das, G., Mannila, H.: The discrete basis problem. In: F\u00fcrnkranz, J., Scheffer, T., Spiliopoulou, M. (eds.) PKDD 2006. LNCS (LNAI), vol. 4213, pp. 335\u2013346. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11871637_33"},{"key":"2_CR57","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1007\/978-3-642-39256-6_5","volume-title":"Data and Applications Security and Privacy XXVII","author":"B Mitra","year":"2013","unstructured":"Mitra, B., Sural, S., Atluri, V., Vaidya, J.: Toward mining of temporal roles. In: Wang, L., Shafiq, B. (eds.) DBSec 2013. LNCS, vol. 7964, pp. 65\u201380. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-39256-6_5"},{"issue":"1","key":"2_CR58","doi-asserted-by":"publisher","first-page":"31","DOI":"10.3233\/JCS-140512","volume":"23","author":"B Mitra","year":"2015","unstructured":"Mitra, B., Sural, S., Atluri, V., Vaidya, J.: The generalized temporal role mining problem. J. Comput. Secur. 23(1), 31\u201358 (2015)","journal-title":"J. Comput. Secur."},{"key":"2_CR59","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1016\/j.cose.2016.04.002","volume":"60","author":"B Mitra","year":"2016","unstructured":"Mitra, B., Sural, S., Vaidya, J., Atluri, V.: Mining temporal roles using many-valued concepts. Comput. Secur. 60, 79\u201394 (2016)","journal-title":"Comput. Secur."},{"key":"2_CR60","doi-asserted-by":"publisher","first-page":"294","DOI":"10.1049\/iet-ifs.2016.0258","volume":"11","author":"B Mitra","year":"2017","unstructured":"Mitra, B., Sural, S., Vaidya, J., Atluri, V.: Migrating from RBAC to temporal RBAC. IET Inf. Secur. 11, 294\u2013300 (2017)","journal-title":"IET Inf. Secur."},{"key":"2_CR61","unstructured":"Mocanu, D.C., Turkmen, F., Liotta, A.: Towards ABAC policy mining from logs with deep learning. In: International Multiconference (2015)"},{"key":"2_CR62","doi-asserted-by":"crossref","unstructured":"Molloy, I., et al.: Mining roles with semantic meanings. In: Proceedings of 13th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 21\u201330, June 2008","DOI":"10.1145\/1377836.1377840"},{"issue":"4","key":"2_CR63","doi-asserted-by":"publisher","first-page":"36:1","DOI":"10.1145\/1880022.1880030","volume":"13","author":"I Molloy","year":"2010","unstructured":"Molloy, I., et al.: Mining roles with multiple objectives. ACM Trans. Inf. Syst. Secur. (TISSEC) 13(4), 36:1\u201336:35 (2010)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"2_CR64","doi-asserted-by":"crossref","unstructured":"Molloy, I., Li, N., Qi, Y.A., Lobo, J., Dickens, L.: Mining roles with noisy data. In: Proceedings of 15th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 45\u201354, June 2010","DOI":"10.1145\/1809842.1809852"},{"key":"2_CR65","doi-asserted-by":"crossref","unstructured":"Molloy, I., Park, Y., Chari, S.: Generative models for access control policies: applications to role mining over logs with attribution. In: Proceedings of 17th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 45\u201356, June 2012","DOI":"10.1145\/2295136.2295145"},{"key":"2_CR66","doi-asserted-by":"crossref","unstructured":"Narouei, M., Khanpour, H., Takabi, H., Parde, N., Nielsen, R.: Towards a top-down policy engineering framework for attribute-based access control. In: ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 103\u2013114 (2017)","DOI":"10.1145\/3078861.3078874"},{"key":"2_CR67","doi-asserted-by":"crossref","unstructured":"Narouei, M., Takabi, H.: Towards an automatic top-down role engineering approach using natural language processing techniques. In: Proceedings of 20th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 157\u2013160, June 2015","DOI":"10.1145\/2752952.2752958"},{"key":"2_CR68","doi-asserted-by":"crossref","unstructured":"Neumann, G., Strembeck, M.: A scenario-driven role engineering process for functional RBAC roles. In: Proceedings of 7th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 33\u201342, June 2002","DOI":"10.1145\/507711.507717"},{"key":"2_CR69","unstructured":"O\u2019Connor, A.C., Loomis, R.J.: 2010 economic analysis of Role-Based Access Control. RTI International report for NIST (2010)"},{"key":"2_CR70","doi-asserted-by":"crossref","unstructured":"Roeckle, H., Schimpf, G., Weidinger, R.: Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In: Proceedings of 5th ACM Workshop on Role-Based Access Control (RBAC), pp. 103\u2013110, July 2000","DOI":"10.1145\/344287.344308"},{"key":"2_CR71","doi-asserted-by":"crossref","unstructured":"Saenko, I., Kotenko, I.: Genetic algorithms for role mining problem. In: Proceedings of 19th International Euromicro Conference on Parallel, Distributed and Network-Based Processing (PDP), pp. 646\u2013650, February 2011","DOI":"10.1109\/PDP.2011.63"},{"key":"2_CR72","doi-asserted-by":"crossref","unstructured":"Saenko, I., Kotenko, I.: Design and performance evaluation of improved genetic algorithm for role mining problem. In: Proceedings of 20th Euromicro International Conference on Parallel, Distributed and Network-Based Processing (PDP), pp. 269\u2013274, February 2012","DOI":"10.1109\/PDP.2012.31"},{"issue":"11","key":"2_CR73","doi-asserted-by":"publisher","first-page":"9","DOI":"10.1109\/2.241422","volume":"26","author":"RS Sandhu","year":"1993","unstructured":"Sandhu, R.S.: Lattice-based access control models. Computer 26(11), 9\u201319 (1993)","journal-title":"Computer"},{"issue":"2","key":"2_CR74","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"RS Sandhu","year":"1996","unstructured":"Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Comput. 29(2), 38\u201347 (1996)","journal-title":"IEEE Comput."},{"key":"2_CR75","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1007\/978-3-319-26961-0_7","volume-title":"Information Systems Security","author":"P Sarana","year":"2015","unstructured":"Sarana, P., Roy, A., Sural, S., Vaidya, J., Atluri, V.: Role mining in the presence of separation of duty constraints. In: Jajodia, S., Mazumdar, C. (eds.) ICISS 2015. LNCS, vol. 9478, pp. 98\u2013117. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-26961-0_7"},{"key":"2_CR76","doi-asserted-by":"crossref","unstructured":"Shin, D., Ahn, G., Cho, S., Jin, S.: On modeling system-centric information for role engineering. In: Proceedings of 8th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 169\u2013178, June 2003","DOI":"10.1145\/775412.775434"},{"key":"2_CR77","unstructured":"Smolensky, P.: Information processing in dynamical systems: foundations of harmony theory. In: Parallel Distributed Processing, pp. 194\u2013281 (1987)"},{"issue":"1","key":"2_CR78","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1109\/MSP.2010.46","volume":"8","author":"M Strembeck","year":"2010","unstructured":"Strembeck, M.: Scenario-driven role engineering. IEEE Secur. Priv. 8(1), 28\u201335 (2010)","journal-title":"IEEE Secur. Priv."},{"key":"2_CR79","doi-asserted-by":"crossref","unstructured":"Vaidya, J., Atluri, V., Guo, Q.: The role mining problem: finding a minimal descriptive set of roles. In: Proceedings of 12th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 175\u2013184, June 2007","DOI":"10.1145\/1266840.1266870"},{"issue":"3","key":"2_CR80","doi-asserted-by":"publisher","first-page":"27:1","DOI":"10.1145\/1805974.1805983","volume":"13","author":"J Vaidya","year":"2010","unstructured":"Vaidya, J., Atluri, V., Guo, Q.: The role mining problem: a formal perspective. ACM Trans. Inf. Syst. Secur. (TISSEC) 13(3), 27:1\u201327:31 (2010)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"issue":"2","key":"2_CR81","doi-asserted-by":"publisher","first-page":"211","DOI":"10.3233\/JCS-2009-0341","volume":"17","author":"J Vaidya","year":"2009","unstructured":"Vaidya, J., Atluri, V., Guo, Q., Lu, H.: Edge-RMP: minimizing administrative assignments for role-based access control. J. Comput. Secur. (JCS) 17(2), 211\u2013235 (2009)","journal-title":"J. Comput. Secur. (JCS)"},{"key":"2_CR82","doi-asserted-by":"crossref","unstructured":"Vaidya, J., Atluri, V., Warner, J.: Role miner: mining roles using subset enumeration. In: Proceedings of 13th ACM Conference on Computer and Communications Security (CCS), pp. 144\u2013153, October 2006","DOI":"10.1145\/1180405.1180424"},{"issue":"3","key":"2_CR83","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1109\/TDSC.2008.61","volume":"7","author":"J Vaidya","year":"2010","unstructured":"Vaidya, J., Atluri, V., Warner, J., Guo, Q.: Role engineering via prioritized subset enumeration. IEEE Trans. Dependable Secur. Comput. (TDSC) 7(3), 300\u2013314 (2010)","journal-title":"IEEE Trans. Dependable Secur. Comput. (TDSC)"},{"key":"2_CR84","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1007\/978-3-319-25645-0_13","volume-title":"Network and System Security","author":"J Vaidya","year":"2015","unstructured":"Vaidya, J., Shafiq, B., Atluri, V., Lorenzi, D.: A framework for policy similarity evaluation and migration based on change detection. Network and System Security. LNCS, vol. 9408, pp. 191\u2013205. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-25645-0_13"},{"key":"2_CR85","doi-asserted-by":"crossref","unstructured":"Verde, N.V., Vaidya, J., Atluri, V., Colantonio, A.: Role engineering: from theory to practice. In: Proceedings of 2nd ACM Conference on Data and Application Security and Privacy (CODASPY), pp. 181\u2013191, February 2012","DOI":"10.1145\/2133601.2133624"},{"key":"2_CR86","doi-asserted-by":"crossref","unstructured":"Xu, Z., Stoller, S.D.: Algorithms for mining meaningful roles. In: Proceedings of 17th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 57\u201366, June 2012","DOI":"10.1145\/2295136.2295146"},{"key":"2_CR87","doi-asserted-by":"crossref","unstructured":"Xu, Z., Stoller, S.: Mining attribute-based access control policies from logs. Computing Research Repository - arXiv (2014)","DOI":"10.1007\/978-3-662-43936-4_18"},{"key":"2_CR88","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1109\/TDSC.2014.2369048","volume":"12","author":"Z Xu","year":"2015","unstructured":"Xu, Z., Stoller, S.: Mining attribute-based access control policies. IEEE Trans. Dependable Secur. Comput. (TDSC) 12, 533\u2013545 (2015)","journal-title":"IEEE Trans. Dependable Secur. Comput. (TDSC)"},{"key":"2_CR89","doi-asserted-by":"crossref","unstructured":"Zhang, D., Ramamohanarao, K., Ebringer, T.: Role engineering using graph optimisation. In: Proceedings of 14th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 139\u2013144, June 2007","DOI":"10.1145\/1266840.1266862"},{"key":"2_CR90","doi-asserted-by":"crossref","unstructured":"Zhang, D., Ramamohanarao, K., Ebringer, T.: Permission set mining: discovering practical and useful roles. In: Proceedings of 24th Annual Computer Security Applications Conference (ACSAC), pp. 247\u2013256, December 2008","DOI":"10.1109\/ACSAC.2008.21"},{"key":"2_CR91","doi-asserted-by":"crossref","unstructured":"Zhang, W., Chen, Y., Gunter, C., Liebovitz, D., Malin, B.: Evolving role definitions through permission invocation patterns. In: Proceedings of 18th ACM Symposium on Access Control Models and Technologies (SACMAT), pp. 37\u201348, June 2013","DOI":"10.1145\/2462410.2462422"}],"container-title":["Lecture Notes in Computer Science","From Database to Cyber Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-04834-1_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,4]],"date-time":"2026-04-04T07:11:24Z","timestamp":1775286684000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-04834-1_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783030048334","9783030048341"],"references-count":91,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-04834-1_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]}}}