{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:12:36Z","timestamp":1742911956853,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031514814"},{"type":"electronic","value":"9783031514821"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-51482-1_21","type":"book-chapter","created":{"date-parts":[[2024,1,10]],"date-time":"2024-01-10T06:02:47Z","timestamp":1704866567000},"page":"410-430","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Acumen: Analysing the\u00a0Impact of\u00a0Organisational Change on\u00a0Users\u2019 Access Entitlements"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4014-4976","authenticated-orcid":false,"given":"Selasi","family":"Kwashie","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0193-2654","authenticated-orcid":false,"given":"Wei","family":"Kang","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5957-6168","authenticated-orcid":false,"given":"Sandeep","family":"Santhosh Kumar","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8005-3097","authenticated-orcid":false,"given":"Geoff","family":"Jarrad","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6353-8359","authenticated-orcid":false,"given":"Seyit","family":"Camtepe","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3289-6599","authenticated-orcid":false,"given":"Surya","family":"Nepal","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2024,1,11]]},"reference":[{"key":"21_CR1","doi-asserted-by":"crossref","unstructured":"Agrawal, D., Giles, J., Lee, K., Lobo, J.: Policy ratification. In: Proceedings of Sixth IEEE International Workshop on Policies for Distributed Systems and Networks, Los Alamitos, CA, USA, pp. 223\u2013232. IEEE Computer Society (2005)","DOI":"10.1109\/POLICY.2005.25"},{"key":"21_CR2","doi-asserted-by":"publisher","first-page":"305","DOI":"10.1007\/978-3-319-10575-8_11","volume-title":"Handbook of Model Checking","author":"C Barrett","year":"2018","unstructured":"Barrett, C., Tinelli, C.: Satisfiability modulo theories. In: Clarke, E., Henzinger, T., Veith, H., Bloem, R. (eds.) Handbook of Model Checking, pp. 305\u2013343. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-10575-8_11"},{"key":"21_CR3","unstructured":"ter Beek, M., Gnesi, S., Montangero, C., Semini, L.: Detecting policy conflicts by model checking UML state machines, pp. 59\u201374 (2009)"},{"key":"21_CR4","doi-asserted-by":"crossref","unstructured":"Brace, K.S., Rudell, R.L., Bryant, R.E.: Efficient implementation of a BDD package. In: Proceedings of the 27th ACM\/IEEE Conference on Design Automation, pp. 40\u201345. IEEE\/ACM, ACM Press (1991)","DOI":"10.1145\/123186.123222"},{"key":"21_CR5","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1007\/978-3-319-10575-8_7","volume-title":"Handbook of Model Checking","author":"RE Bryant","year":"2018","unstructured":"Bryant, R.E.: Binary decision diagrams. In: Clarke, E., Henzinger, T., Veith, H., Bloem, R. (eds.) Handbook of Model Checking, pp. 191\u2013217. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-10575-8_7"},{"key":"21_CR6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10575-8","volume-title":"Handbook of Model Checking","author":"EM Clarke","year":"2018","unstructured":"Clarke, E.M., Henzinger, T.A., Veith, H., Bloem, R.: Handbook of Model Checking, 1st edn. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-10575-8","edition":"1"},{"key":"21_CR7","doi-asserted-by":"crossref","unstructured":"Craven, R., Lobo, J., Ma, J., Russo, A., Lupu, E., Bandara, A.: Expressive policy analysis with enhanced system dynamicity. In: Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, pp. 239\u2013250 (2009)","DOI":"10.1145\/1533057.1533091"},{"key":"21_CR8","doi-asserted-by":"publisher","first-page":"675","DOI":"10.1007\/s10009-016-0433-2","volume":"19","author":"T van Dijk","year":"2017","unstructured":"van Dijk, T., Pol, J.: Sylvan: multi-core framework for decision diagrams. Int. J. Softw. Tools Technol. Transf. 19, 675\u2013696 (2017)","journal-title":"Int. J. Softw. Tools Technol. Transf."},{"key":"21_CR9","unstructured":"Knuth, D.E.: The Art of Computer Programming, vol. 4A, 6th edn. Addison-Wesley, Boston (2015)"},{"key":"21_CR10","unstructured":"Filippidis, I., Haesaert, S., Livingston, S.C., Wenzel, M.: California Institute of Technology (2022)"},{"key":"21_CR11","doi-asserted-by":"crossref","unstructured":"Fisler, K., Krishnamurthi, S., Meyerovich, L., Tschantz, M.: Verification and change-impact analysis of access-control policies, pp. 196\u2013205 (2005)","DOI":"10.1145\/1062455.1062502"},{"issue":"6","key":"21_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3295749","volume":"51","author":"AA Jabal","year":"2019","unstructured":"Jabal, A.A., et al.: Methods and tools for policy analysis. ACM Comput. Surv. (CSUR) 51(6), 1\u201335 (2019)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"21_CR13","doi-asserted-by":"crossref","unstructured":"Koch, M., Mancini, L.V., Parisi-Presicce, F.: On the specification and evolution of access control policies. In: Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies, SACMAT 2001, pp. 121\u2013130. Association for Computing Machinery, New York (2001)","DOI":"10.1145\/373256.373280"},{"key":"21_CR14","doi-asserted-by":"crossref","unstructured":"Kolovski, V., Hendler, J., Parsia, B.: Analyzing web access control policies. In: Proceedings of the 16th International Conference on World Wide Web, pp. 677\u2013686 (2007)","DOI":"10.1145\/1242572.1242664"},{"issue":"4","key":"21_CR15","doi-asserted-by":"publisher","first-page":"253","DOI":"10.1007\/s10207-010-0106-1","volume":"9","author":"D Lin","year":"2010","unstructured":"Lin, D., Rao, P., Bertino, E., Li, N., Lobo, J.: Exam: a comprehensive environment for the analysis of access control policies. Int. J. Inf. Secur. 9(4), 253\u2013273 (2010)","journal-title":"Int. J. Inf. Secur."},{"key":"21_CR16","doi-asserted-by":"crossref","unstructured":"Lin, D., Rao, P., Bertino, E., Lobo, J.: An approach to evaluate policy similarity. In: Proceedings of the 12th ACM Symposium on Access Control Models and Technologies, pp. 1\u201310 (2007)","DOI":"10.1145\/1266840.1266842"},{"key":"21_CR17","doi-asserted-by":"crossref","unstructured":"Martin, E., Xie, T.: A fault model and mutation testing of access control policies. In: Proceedings of the 16th International Conference on World Wide Web, pp. 667\u2013676 (2007)","DOI":"10.1145\/1242572.1242663"},{"key":"21_CR18","doi-asserted-by":"crossref","unstructured":"Minato, S.I., Ishiura, N., Yajima, S.: Shared binary decision diagram with attributed edges for efficient boolean function manipulation, vol. VLD89, pp. 52\u201357 (1990)","DOI":"10.1145\/123186.123225"},{"key":"21_CR19","unstructured":"OASIS: extensible access control markup language (XACML) (2013)"},{"key":"21_CR20","unstructured":"Rice, M., Kulhari, S.: A survey of static variable ordering heuristics for efficient BDD\/MDD construction. University of California, Technical report (2008)"},{"key":"21_CR21","unstructured":"Rudell, R.: Dynamic variable ordering for ordered binary decision diagrams. In: Proceedings of the 1993 IEEE\/ACM International Conference on Computer-Aided Design, ICCAD 1993, pp. 42\u201347. IEEE Computer Society Press, Washington, DC (1993)"},{"key":"21_CR22","doi-asserted-by":"crossref","unstructured":"Sandhu, R., Ferraiolo, D., Kuhn, R., et al.: The NIST model for role-based access control: towards a unified standard. In: ACM Workshop on Role-Based Access Control, vol. 10 (2000)","DOI":"10.1145\/344287.344301"},{"key":"21_CR23","doi-asserted-by":"crossref","unstructured":"Shu, C.C., Yang, E., Arenas, A.: Detecting conflicts in ABAC policies with rule-reduction and binary-search techniques, pp. 182\u2013185 (2009)","DOI":"10.1109\/POLICY.2009.22"},{"key":"21_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1007\/978-3-662-46666-7_7","volume-title":"Principles of Security and Trust","author":"F Turkmen","year":"2015","unstructured":"Turkmen, F., den Hartog, J., Ranise, S., Zannone, N.: Analysis of XACML policies with SMT. In: Focardi, R., Myers, A. (eds.) POST 2015. LNCS, vol. 9036, pp. 115\u2013134. Springer, Heidelberg (2015). https:\/\/doi.org\/10.1007\/978-3-662-46666-7_7"},{"issue":"5","key":"21_CR25","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1109\/TDSC.2014.2369048","volume":"12","author":"Z Xu","year":"2015","unstructured":"Xu, Z., Stoller, S.D.: Mining attribute-based access control policies. IEEE Trans. Dependable Secure Comput. 12(5), 533\u2013545 (2015)","journal-title":"IEEE Trans. Dependable Secure Comput."}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2023"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-51482-1_21","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,7]],"date-time":"2024-11-07T20:14:12Z","timestamp":1731010452000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-51482-1_21"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031514814","9783031514821"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-51482-1_21","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"11 January 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Hague","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 September 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 September 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2023.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"478","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"93","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3-4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"10","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}